Re: nessus sudo support question
Michel Arboi <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Organization | Nessus.org |
| Message-ID | <20081004013933.0fc31132@casserole> |
On Sat, 04 Oct 2008 09:26:09 +1300 Jason Haar <[email protected]> wrote: > That was the whole point of my email - you can't restrict sudo when > called in such a fashion. If it ran "sudo rpm " , etc that would be > achievable If you are allowed to run rpm as root, you can get a full root access rather easily, as you can replace any system file, or run pre or post scripts. No? _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus