As suggested, you could create a script that specifically does what you 
want, and only give PHP sudo access to that specific script.  That would 
be more secure than what you're suggesting.

However.......... -> LDAP.

Kindest regards,

Jan Middelkoop
Recreatie en Zorg Groep B.V.

-- 
Website: http://www.recreatie-zorg.nl/
E-mail: j...@recreatie-zorg.nl
Telephone: +31 10 714 22 97


Op 12-11-12 14:27, Robert Lefebvre schreef:
> Another thought was to only make the sudoers file accessible to php 
> and not add php as a sudo user. If/when the script was run, I could 
> have php write to sudoers to add itself. Then when the script was done 
> it could rewrite again and remove itself. The benefit would be that it 
> can only add itself as a sudo user (and not any other user) whereas if 
> I grant php sudo access anyone hacking php could create a user and 
> give it sudo access too. Definitely not perfect, just one extra layer 
> perhaps.


------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_nov
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to