[sudo-users] Fwd: SUDO package for Sparc version 1.6.8p12

[Brian Gupta]

On 6/26/07, Chris Jepeway <jepeway at blasted-heath.com> wrote:
>
> Can anybody help Tim out?  My involvement with sudo
> predates the NOEXEC tag.
>
> Chris.
>
> Begin forwarded message:
>
> > From: "Manochehri, Tim" <Tim.Manochehri at blueshieldca.com>
> > Date: June 19, 2007 7:01:52 PM EDT
> > To: "jepeway" <www at blasted-heath.com>
> > Subject: SUDO package for Sparc version 1.6.8p12
> >
> > Hey Chris,
> >
> > I am having an issue with 'sudo' when NOEXEC is enabled.
> >
> > Here is my sudoers file.
> >
> > # sudoers file.
> > # This file MUST be edited with the 'visudo' command as root.
> > # User privilege specification
> > root    ALL=(ALL) ALL
> > %sysadmin       ALL=(ALL) ALL
> > %tsadmin        ALL=(iwui) ALL, (root) /usr/bin/su - iwui, (root)
> > /usr/bin/su - tsadmin, (root) /etc/init.d/iw* st*, (root)
> > /local/iw-home/private/bin/iwfsfix, (root)
> > /local/iw-home/private/bin/iwfsck, (root) /local/iw-home/bin/iwreset,
> > (root) /local/iw-home/bin/iwgroup, (root) /etc/init.d/iw.tsreport,
> > (root) /local/iw-home/iw-perl/bin/iwperl, (root)
> > /local/iw-home/bin/make_toolkit.ipl, (root)
> > /local/iw-home/eventsubsystem/bin/eventsubd.sh, (root) NOEXEC:
> > /usr/bin/vi  /local/iw-home/httpd/iw-bin/changePassword.cgi, (root)
> > NOEXEC: /usr/bin/vi  /local/iw-home/httpd/iw-bin/changePassword.cgi



Why do you have the same NOEXEC statement listed twice?
http://www.gratisoft.us/sudo/man/sudoers.html#preventing_shell_escapes