Sudo from scripts

g geleem at bellsouth.net
Tue Nov 18 03:16:22 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Patrick O'Callaghan wrote:

> You can do that if you're root. Otherwise you can't. You can do lots of
> idiotic things as root. What's your point?

in jerry's comment;
 'Giving root ownership to a script IMHO is a security issue.'
led me to believe that ability to do so by normal user was still unchanged.

having read 'chown(2)' and trying it to see just what occurred, now shows
me that it has been changed.

i had hopes that it would be corrected, i have never checked or tried to
do so. as i have never had reason to do, because if i ever need to do
something of 'root' level, i have always changed to 'root'.

> You seem to be suggesting that root should be able to change to some
> owners and not to others.

not even.

> (SElinux is a different story).

and i am glad to see it and enjoying learning about it.
- --
peace out.

tc,hago.

g
.

in a free world without fences, who needs gates.

learn linux:
'Rute User's Tutorial and Exposition'   http://rute.2038bug.com/index.html.gz
'The Linux Documentation Project'   http://www.tldp.org/
'LDP HOWTO-index'   http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html
'HowtoForge'   http://howtoforge.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org

iD8DBQFJIjOG+C4Bj9Rkw/wRAiC2AJ94Rgc0RLQ0576AWcaPEshqhocZigCgp77m
qLnjN8ZJHHYiKZQ1OcLFXVA=
=GFOh
-----END PGP SIGNATURE-----




More information about the fedora-list mailing list