[sudo-users] Expansion of nested Cmnd_Alias commands

[Galen Johnson]

Would it be fair to assume that this would show their effective commands and not just a basic expansion?  In other words, if one has the same command with different arguments in more than one alias, will it show what the true command they can run will be and not just show you all commands as they expand out?

A (greatly) simplified example:

Command_Alias LS1=/bin/ls -l, /bin/ls -r
Command_Alias LS2=/bin/ls

Obviously depending on the order these are given to a user, this would allow the user to either run /bin/ls or limit them to the -l and -r options.  Would the command expansion indicate this or would it show '/bin/ls -l, /bin/ls -r, /bin/ls'?

=G=

-----Original Message-----
From: sudo-users-bounces at courtesan.com [mailto:sudo-users-bounces at courtesan.com] On Behalf Of Todd C. Miller
Sent: Friday, April 25, 2008 10:16 AM
To: Charles Marshall
Cc: sudo-users at sudo.ws
Subject: Re: [sudo-users] Expansion of nested Cmnd_Alias commands

In message <2B0B46C2-622F-4CD6-985D-C3969BB2104B at wozi.com>
        so spake Charles Marshall (charles):

> The issue is that my users, will inevitably bug me saying that they
> don't know what commands they can run from sudo.  Is there a way to
> have sudo show the expansion of the nested command aliases?

Not in sudo 1.6.x, this is something that is fixed in the 1.7.x
branch which will have a release candidate out soon.

 - todd
____________________________________________________________
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users