On Mon, May 05, 2008 at 09:59:22PM +0800, Ohad Levy wrote: > Hello All, > > Is there any risk to give a user sudo rights of mknod? > > as far as I understand it now, it can only create new devices, > therefor the risk for a running system is minimal.
Not sure what you mean by 'new devices', if you give your users unfiltered sudo access to mknod, they can create device files for your disks and write to them. Then it's a fairly simple matter to locate interesting disk blocks and write to them... Cheers, Muli ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
