[sudo-users] group in Runas

martin f krafft madduck at madduck.net
Thu Sep 30 11:37:47 EDT 2004


also sprach mlh at zip.com.au <mlh at zip.com.au> [2004.09.30.1622 +0200]:
>  mlh     ALL=(root,%root,%bin,%daemon,%sys) /bin/id

This merely means that mlh may invoke /bin/id under the context of
root, or any users that are members of root, bin, daemon, or sys.

Thus, e.g.

  sudo -u bin /bin/id

will work because user 'bin' is a member of group 'bin'.

Sudo does not mess with groups. I would be happy to be proven wrong.

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net at madduck
 
invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver!
spamtraps: madduck.bogus at madduck.net
 
"never trust a woman who wears mauve, whatever her age may be, or a
 woman over thirty-five who is fond of pink ribbons. it always means
 they have a history."
                                                        -- oscar wilde
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: </pipermail/sudo-users/attachments/20040930/0786af0b/attachment.bin>


More information about the sudo-users mailing list