Re: root group in solaris : Tools

--=-r5gRLvduzDaTFo4z9KD8
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Salut,

On Thu, 2006-09-21 at 15:46 -0700, Mike Kuriger wrote:
> Cmnd_Alias      SHELLS =3D        /sbin/sh,\
>                                 /bin/sh,/bin/csh,/bin/tcsh,/bin/ksh,\
>                               =20
> /usr/bin/sh,/usr/bin/csh,/usr/bin/tcsh,/usr/bin/ksh
>=20
> Cmnd_Alias      FORBIDDEN =3D     /bin/passwd root,/bin/su,/sbin/su
>=20
> %wheel          ALL =3D           (ALL) ALL,!SHELLS,!FORBIDDEN

This config is easy to break out of:

sudo visudo
sudo vi /etc/sudoers
sudo nano /etc/sudoers
make editor && sudo editor /etc/sudoers
...

				Tonnerre
--=20
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      [email protected]

--=-r5gRLvduzDaTFo4z9KD8
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)
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=k5mQ
-----END PGP SIGNATURE-----

--=-r5gRLvduzDaTFo4z9KD8--