[Freeipa-devel] [PATCH] self service aci
Pete Rowley
prowley at redhat.com
Tue Oct 30 18:47:26 UTC 2007
Simo Sorce wrote:
> On Tue, 2007-10-30 at 11:21 -0700, Pete Rowley wrote:
>
>> Well, I was thinking along the lines of it allowing arbitrary commands
>> to be executed with root privilege. For example, an escalation of privilege:
>>
>> loginShell: /home/prowley/addMeToSudoers
>>
>> I suspect this is the kind of thing that makes it problem, still need to
>> check it out though.
>>
>
> The shell is run as the user, so this is not to worry.
>
>
Hmm, yes. So what problem do you envisage with this?
--
Pete
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3241 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071030/fee83fe6/attachment.bin>
More information about the Freeipa-devel
mailing list