Re: Make sudo -S work with ssh -T
Grant Taylor via sudo-users <[email protected]> Thu, 23 Jun 2022 21:42:14 -0600
| Newsgroups | gmane.comp.tools.sudo.user |
|---|---|
| Organization | TNet Consulting |
| Message-ID | <[email protected]> |
On 6/23/22 7:51 PM, Glen Huang wrote: > Could you recommend a secure way to provide the password when using > sudo with rsync in an unattended way? I read it somewhere that giving > rsync NOPASSWD means giving NOPASSWD to the ability to setuid root > on any file, which I’m not comfortable with. Have you considered authenticating to sudo via SSH agent forwarding? It has the typical SSH agent forwarding issues, some of which can be mitigated. But it does mean that you actually authenticate to sudo and can thereby avoid -- what I consider to be -- the dreaded NOPASSWD: option. -- Grant. . . . unix || die ____________________________________________________________ sudo-users mailing list <[email protected]> For list information, options, or to unsubscribe, visit: https://www.sudo.ws/mailman/listinfo/sudo-users