[sudo-workers] NOEXEC: /usr/bin/vi using ldap

Jacob Pszonowsky jdp16 at mac.com
Wed Jul 7 16:27:30 EDT 2004


Question: Does the NOEXEC: /usr/bin/vi syntax work with ldap? Also, is 
it possible to use this in conjuction with:

sudoCommand: !/usr/bin/vi /etc/passwd
sudoCommand: NOEXEC: /usr/bin/vi
sudoCommand: ALL

such that
"/usr/bin/vi /etc/passwd" is NOT allowed,
executing a shell from vi is NOT allowed,
all other commands are allowed

It doesn't seem to work, but I could have the syntax wrong.

Thanks,
Jake

Jacob Pszonowsky

jdp16 at mac.com
(c) 415.225.2647
(f) 415.358.5918




More information about the sudo-workers mailing list