Package: sudo Version: 1.7.0-1 Severity: normal The default %sudo example looks like this:
%sudo ALL=NOPASSWD: ALL This allows members of group sudo to run any command as root without a password. Given that after becoming root a user can trivially become any other user, please consider changing this example to: %sudo ALL=(ALL) NOPASSWD: ALL This allows members of group sudo to run any command as any user without a password. - Josh Triplett -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.30-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages sudo depends on: ii libc6 2.9-19 GNU C Library: Shared libraries ii libpam-modules 1.0.1-9 Pluggable Authentication Modules f ii libpam0g 1.0.1-9 Pluggable Authentication Modules l sudo recommends no packages. sudo suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
