[sudo-users] nest Cmnd_Alias

[Russell Van Tassell]

On Tue, Nov 01, 2005 at 02:21:23PM -0600, Mark F wrote:
> Is it ok to nest Cmnd_Aliases?  I can't find any definitive answers but 
> I notice sudo -l does not expand them.
> 
> Thanks,
> -Mark

Yes, nesting should work just fine... I use it on a regular basis.  And
you're right, they don't (often) get expanded, if at all.  One simple
example from one of my sudoers files:

# Traffic sniffing
Cmnd_Alias      SNOOP    = /usr/sbin/snoop
Cmnd_Alias      TCPDUMP  = /usr/local/sbin/tcpdump
Cmnd_Alias      SNIFF    = SNOOP, TCPDUMP



-- 
Russell M. Van Tassell
russell at loosenut.com

If you think education is expensive, try ignorance.
                -- Derek Bok, president of Harvard