Re: Modifying sudo to not require setuid

"Todd C. Miller" <[email protected]> writes:
> I've considered this in the past but it's not something on my
> roadmap.

I'd be interested in working on this if you're willing to accept
patches. I think the problems are surmountable. Do you have suggestions
for the design of the necessary changes?

I believe at least some systems would be willing to run a daemon just
for sudo. One of the advantages is that once sudo doesn't require
setuid, you can (mostly) completely remove the setuid bit from your
system by wrapping formerly-setuid commands with sudo. That could be
quite interesting: If your system is setuid-free, you can give
unprilveged users more power to manipulate their own environments (such
as chroot) without needing to worry that they will use those
environment-manipulation abilities to attack setuid binaries.

____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers