Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-29 Thread Gianluca Cecchi
On Thu, Aug 29, 2019 at 6:05 PM Valeri Galtsev wrote: > > > On 2019-08-29 10:53, Jonathan Billings wrote: > > On Thu, Aug 29, 2019 at 10:25:50AM -0500, Valeri Galtsev wrote: > >> root@point:/home/valeri # cd > >> root@point:~ # whoami > >> root > >> root@point:~ # rm -rf / > >> rm: "/" may not

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-29 Thread Valeri Galtsev
On 2019-08-29 10:53, Jonathan Billings wrote: On Thu, Aug 29, 2019 at 10:25:50AM -0500, Valeri Galtsev wrote: root@point:/home/valeri # cd root@point:~ # whoami root root@point:~ # rm -rf / rm: "/" may not be removed Somebody is really clever in this World ;-) Well, FreeBSD folks made my

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-29 Thread Jonathan Billings
On Thu, Aug 29, 2019 at 10:25:50AM -0500, Valeri Galtsev wrote: > root@point:/home/valeri # cd > root@point:~ # whoami > root > root@point:~ # rm -rf / > rm: "/" may not be removed > > Somebody is really clever in this World ;-) Well, FreeBSD folks made my day > (again!). Note, that that I did on

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-29 Thread Valeri Galtsev
On 2019-08-17 08:42, Jonathan Billings wrote: On Aug 17, 2019, at 9:25 AM, Valeri Galtsev wrote: I like this one. Long-long ago it was one of the “tricky” questions at the UNIX admin test (exam). Basically, no matter how devastating that may sound, the command only will remove what is

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-19 Thread Jonathan Billings
On Aug 19, 2019, at 4:53 PM, James Szinger wrote: > Just for fun, I cloned a C7 VM and ran rm -rf. I then examined the > disk image with guestfish. Everything was gone except for a few empty > directoriers: /dev, /etc, /proc, /sys, and so on. Yeah, rm can’t delete mountpoints and anything that

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-19 Thread James Szinger
On Fri, Aug 16, 2019 at 10:13 PM John Pierce wrote: > > $ sudo rm -rf / Just for fun, I cloned a C7 VM and ran rm -rf. I then examined the disk image with guestfish. Everything was gone except for a few empty directoriers: /dev, /etc, /proc, /sys, and so on. Jim

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-17 Thread Jonathan Billings
On Aug 17, 2019, at 9:25 AM, Valeri Galtsev wrote: > I like this one. Long-long ago it was one of the “tricky” questions at the > UNIX admin test (exam). Basically, no matter how devastating that may sound, > the command only will remove what is (alphabetically it was that time) before >

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-17 Thread Valeri Galtsev
> On Aug 16, 2019, at 11:12 PM, John Pierce wrote: > > On Fri, Aug 16, 2019 at 8:39 PM Bagas Sanjaya wrote: > >> Why did you say it is wrong to give full admin privileges to random users? >> > > > $ sudo rm -rf / > I like this one. Long-long ago it was one of the “tricky” questions at

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-16 Thread John Pierce
On Fri, Aug 16, 2019 at 8:39 PM Bagas Sanjaya wrote: > Why did you say it is wrong to give full admin privileges to random users? > $ sudo rm -rf / $ sudo $ sudo cp /etc/{passwd,shadow} $home; (run john-the-ripper against passwd/shadow files). etc etc etc. -- -john r pierce

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-16 Thread Bagas Sanjaya
Why did you say it is wrong to give full admin privileges to random users? -- An old man doll... just what I always wanted! - Clara ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-16 Thread Jon LaBadie
On Fri, Aug 16, 2019 at 08:01:56AM -0500, Valeri Galtsev wrote: > > > > On Aug 16, 2019, at 6:21 AM, Warren Young wrote: > > > > On Aug 15, 2019, at 11:04 PM, Bagas Sanjaya wrote: > >> > >> Based on above cases, is it OK to give group of random users full > >> administrator privileges using

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-16 Thread Valeri Galtsev
> On Aug 16, 2019, at 6:21 AM, Warren Young wrote: > > On Aug 15, 2019, at 11:04 PM, Bagas Sanjaya wrote: >> >> Based on above cases, is it OK to give group of random users full >> administrator privileges using sudo, by adding them to sudoers with ALL >> privileges? Should sudoers call

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-16 Thread Warren Young
On Aug 15, 2019, at 11:04 PM, Bagas Sanjaya wrote: > > Based on above cases, is it OK to give group of random users full > administrator privileges using sudo, by adding them to sudoers with ALL > privileges? Should sudoers call customer service number instead of sysadmin > when something

Re: [CentOS] Giving full administrator privileges through sudo on production systems

2019-08-15 Thread Nicolas Kovacs
Le 16/08/2019 à 07:04, Bagas Sanjaya a écrit : > Based on above cases, is it OK to give group of random users full > administrator privileges using sudo, by adding them to sudoers with ALL > privileges? Short answer : this is VERY wrong. Cheers, Niki -- Microlinux - Solutions informatiques

[CentOS] Giving full administrator privileges through sudo on production systems

2019-08-15 Thread Bagas Sanjaya
Hello, Consider two following cases: 1. On production systems on television stations, a sysadmin give teens (remaja group, age 13 and older) full administrator privileges by adding this line to sudoers: %remaja ALL=(ALL:ALL) ALL Rationale: Almost all programs on the system can only be run