[sudo-workers] How to know if running a given command requires password confirmation a priori?

Michael Grubb sudo at dailyvoid.com
Tue Jul 5 14:50:33 EDT 2005


On Jul 2, 2005, at 8:50 AM, Gustavo Noronha Silva wrote:

> Em Qui, 2005-06-30 às 08:50 -0500, Michael Grubb escreveu:
>
>> You can set the listpw to never
>> i.e.:
>> Defautls listpw = never
>> This may be a security issue that may not be acceptible in certain
>> circumstances.
>>
>
> I figure it could be difficult to convince the maintainers of
> distributions or sudo hackers to make this the default, even if it  
> is a
> not that bad security concern.
>
> What do you think of sudo providing a simple switch that would tell me
> if a given command will require password confirmation? I am already  
> able
> to test that by actually running the command, so no security  
> concern is
> raised, I believe. That would make life much easier for my code.
>
> Should I write a patch?
>

Sure, why not.

> Thanks,
>
> -- 
> kov at debian.org: Gustavo Noronha <http://people.debian.org/~kov>
> Debian:  <http://www.debian.org>  *  <http://www.debian-br.org>
>
>





More information about the sudo-workers mailing list