[sudo-users] sudo locked down Cmnd alias

Richard van den Berg richard at vdberg.org
Mon Dec 20 06:25:40 EST 2010



"Matthew Hannigan" <mlh at zip.com.au> wrote:
>This one is a bad security hole.  You should always use -h with
>chown/chgrp.
>Imagine a link to say /etc/passwd or /etc/shadow in /home/john.

Thanks for pointing that out!

Richard




More information about the sudo-users mailing list