Salut,

On Thu, 2006-09-21 at 15:46 -0700, Mike Kuriger wrote:
> Cmnd_Alias      SHELLS =        /sbin/sh,\
>                                 /bin/sh,/bin/csh,/bin/tcsh,/bin/ksh,\
>                                
> /usr/bin/sh,/usr/bin/csh,/usr/bin/tcsh,/usr/bin/ksh
> 
> Cmnd_Alias      FORBIDDEN =     /bin/passwd root,/bin/su,/sbin/su
> 
> %wheel          ALL =           (ALL) ALL,!SHELLS,!FORBIDDEN

This config is easy to break out of:

sudo visudo
sudo vi /etc/sudoers
sudo nano /etc/sudoers
make editor && sudo editor /etc/sudoers
...

                                Tonnerre
-- 
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      [EMAIL PROTECTED]

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to