[sudo-users] sudo remove -s and -i option

Goodman Leung gbcbooksmj at gmail.com
Mon Aug 21 19:47:30 MDT 2017


with this two options, normal user which has sudo permission are able to 
promte as root.
for our security policy ,  it is now allow .

在 2017/8/21 19:59, Todd C. Miller 写道:
> On Mon, 21 Aug 2017 17:52:40 +0800, Goodman Leung wrote:
>
>> for security policy , i need to remove sudo -s or -i option ,
>> i thinks i need to modify sudo source code , but before that , any
>> suggtions ?
> Why would you need to do that?  Those options are really just
> shortcuts and don't a user to do anything that the sudoers policy
> wouldn't already allow.
>
>   - todd



More information about the sudo-users mailing list