Re: root group in solaris

--=-jpWmGTxtDwqIOtsEfYtS
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Salut,

On Tue, 2006-09-26 at 17:09 -0700, Jonathan Leffler wrote:
> > What if one of the commands is /bin/ksh? Or if the person in question
> > runs sudo /bin/ksh?
>=20
> Download the source (v1.6.3 is available from SourceForge).  Try it.  The=
=20
> source code needs at least one code change to compile with GCC v4.x on=20
> Solaris 8 - add #include <string.h> but it needs to be wrapped in #ifdef=20
> HAVE_STRING_H and #endif since the autoconfigure process looks for it).

This is absolutely clear to me. I was thinking more in the lines of
"Wouldn't that give the user the right to do whatever he wants, even if
he didn't initially get the permission to do it in /etc/sudoers, and
wouldn't that give the user even the right to _change_ /etc/sudoers?"

				Tonnerre
--=20
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      [email protected]

--=-jpWmGTxtDwqIOtsEfYtS
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)
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=N0bS
-----END PGP SIGNATURE-----

--=-jpWmGTxtDwqIOtsEfYtS--