Checking permissions of command in sudoers

Alek O. Komarnitsky (N-CSC) alek at ast.lmco.com
Thu Feb 20 10:00:54 EST 2003


> From sudo-workers-bounces at sudo.ws Thu Feb 20 03:24 MST 2003
> 
> Hi!
> 
> Is there a possibility to check all the commands in sudoers for their 
> permissions? in my case i have one central sudo-script for many machines.
> for security reasons i would like to check sudoers-file on every machine 
> for the existence and permission(no write bit) of all the commands in the 
> sudoers.

You could use the "sudoers-lint" program to generate a list of 
all of the commands in the sudoers file and then write a wrapper
around that to check for execution - you can slurp this from:
   http://www.komar.org/
      -> Misc. Tech Stuff
      -> sudo-tools

alek


More information about the sudo-workers mailing list