[sudo-users] sudo remove -s and -i option
Michael Ströder
michael at stroeder.com
Wed Aug 23 02:26:36 MDT 2017
Paul Cantle wrote:
> If you insist on doing it this way, you will need to exclude /bin/vi too (because you
> can gain a shell from it) as well as any other shells other than bash that you have
> installed
...and exclude any other programs giving you a shell access (like /usr/bin/less etc.)...
Typically people ask for appropriate sudoers rules for reading log files with less as
user root. Hmmpf!
Ciao, Michael.
More information about the sudo-users
mailing list