[sudo-users] sudo not respecting configuration in sudoers

Todd C. Miller Todd.Miller at courtesan.com
Thu Oct 25 16:37:25 EDT 2007


That's not how sudo works at all.  The host field in sudoers is
there so that a single sudoers file can be distributed among multiple
machines, it has no bearing on whether the user invoking sudo is
local or remote.  Futhermore, sudo uses the result of the gethostname()
system call for host name matching so "localhost" will never match.
Even if "localhost" was to be allowed it would be no different from
"ALL" given the meaning of the host field in sudoers.

 - todd



More information about the sudo-users mailing list