[Freeipa-devel] [PATCH] self service aci

Pete Rowley prowley at redhat.com
Tue Oct 30 18:47:26 UTC 2007


Simo Sorce wrote:
> On Tue, 2007-10-30 at 11:21 -0700, Pete Rowley wrote:
>   
>> Well, I was thinking along the lines of it allowing arbitrary commands 
>> to be executed with root privilege. For example, an escalation of privilege:
>>
>> loginShell: /home/prowley/addMeToSudoers
>>
>> I suspect this is the kind of thing that makes it problem, still need to 
>> check it out though.
>>     
>
> The shell is run as the user, so this is not to worry.
>
>   
Hmm, yes. So what problem do you envisage with this?

-- 
Pete

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3241 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071030/fee83fe6/attachment.bin>


More information about the Freeipa-devel mailing list