Why we should set arguments in sudoers configuration?
Clash Royale CLAN TAG#URR8PPP
up vote
1
down vote
favorite
Why should we set arguments in sudoers configuration? For example
user ALL= EXEC: PASSWD: /sbin/reboot -f ""
here I can call only "reboot -f" command. So if I set
user ALL= EXEC: PASSWD: /sbin/reboot -f *
or
user ALL= EXEC: PASSWD: /sbin/reboot
How can someone use this to hack or do something?
Best regards, Alex.
sudo
asked Oct 20 '17 at 7:59
TheFdu4
233
add a comment |Â
up vote
1
down vote
favorite
Why should we set arguments in sudoers configuration? For example
user ALL= EXEC: PASSWD: /sbin/reboot -f ""
here I can call only "reboot -f" command. So if I set
user ALL= EXEC: PASSWD: /sbin/reboot -f *
or
user ALL= EXEC: PASSWD: /sbin/reboot
How can someone use this to hack or do something?
Best regards, Alex.
sudo
asked Oct 20 '17 at 7:59
TheFdu4
233
1
Considerreboot -p, then drive three hours to restart the machine.
– SatÅ Katsura
Oct 20 '17 at 8:02
1
Imagine needing to give rights toserviceorsystemctl. You want to make very sure they can only restart their own service.
– Ulrich Schwarz
Oct 20 '17 at 8:08
add a comment |Â
up vote
1
down vote
favorite
up vote
1
down vote
favorite
Why should we set arguments in sudoers configuration? For example
user ALL= EXEC: PASSWD: /sbin/reboot -f ""
here I can call only "reboot -f" command. So if I set
user ALL= EXEC: PASSWD: /sbin/reboot -f *
or
user ALL= EXEC: PASSWD: /sbin/reboot
How can someone use this to hack or do something?
Best regards, Alex.
sudo
asked Oct 20 '17 at 7:59
TheFdu4
233
Why should we set arguments in sudoers configuration? For example
user ALL= EXEC: PASSWD: /sbin/reboot -f ""
here I can call only "reboot -f" command. So if I set
user ALL= EXEC: PASSWD: /sbin/reboot -f *
or
user ALL= EXEC: PASSWD: /sbin/reboot
How can someone use this to hack or do something?
Best regards, Alex.
sudo
asked Oct 20 '17 at 7:59
TheFdu4
233
asked Oct 20 '17 at 7:59
TheFdu4
233
asked Oct 20 '17 at 7:59
TheFdu4
233
asked Oct 20 '17 at 7:59
TheFdu4
233
233
1
Considerreboot -p, then drive three hours to restart the machine.
– SatÅ Katsura
Oct 20 '17 at 8:02
1
Imagine needing to give rights toserviceorsystemctl. You want to make very sure they can only restart their own service.
– Ulrich Schwarz
Oct 20 '17 at 8:08
add a comment |Â
1
Considerreboot -p, then drive three hours to restart the machine.
– SatÅ Katsura
Oct 20 '17 at 8:02
1
Imagine needing to give rights toserviceorsystemctl. You want to make very sure they can only restart their own service.
– Ulrich Schwarz
Oct 20 '17 at 8:08
1
1
Consider
reboot -p, then drive three hours to restart the machine.– SatÅ Katsura
Oct 20 '17 at 8:02
Consider
reboot -p, then drive three hours to restart the machine.– SatÅ Katsura
Oct 20 '17 at 8:02
1
1
Imagine needing to give rights to
service or systemctl. You want to make very sure they can only restart their own service.– Ulrich Schwarz
Oct 20 '17 at 8:08
Imagine needing to give rights to
service or systemctl. You want to make very sure they can only restart their own service.– Ulrich Schwarz
Oct 20 '17 at 8:08
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Â
draft saved
draft discarded
Â
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f399287%2fwhy-we-should-set-arguments-in-sudoers-configuration%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
1
Consider
reboot -p, then drive three hours to restart the machine.– SatÅ Katsura
Oct 20 '17 at 8:02
1
Imagine needing to give rights to
serviceorsystemctl. You want to make very sure they can only restart their own service.– Ulrich Schwarz
Oct 20 '17 at 8:08