Re: Problem with newer versions

On Mon, 21 Mar 2005, Markus Ottenbacher wrote:

> /usr/sbin/fou4s: line 1425: su: command not found
> 
> (which is correct, since we don't have su on our machines. It would open
> gaping security holes in combination with sudo rights some users have).
> 
> I looked at the source code but I don't quite understand why 0.12.3
> works while newer versions don't. The test condition that triggers the
> call to su looks quite the same to me.
> 
> Any suggestions at how to circumvent this problem?

Wouldn't simply clearing the SUID bit on /bin/su make it quite harmless, while
still being usable by root?

Martin
--