Relevant bits:
# Shashank: Defect fix AJ2D13470: Begin
echo -e "ALL ALL=(ALL) NOPASSWD:ALL" >> /tmp/${TEMPFILE}
and
# Shashank [s72814] added to generate .bin file and to give access
permissions in user mode: End
# Shashank: Defect fix AJ2D13470: End
cp -f /tmp/${TEMPFILE} /etc/sudoers
wow...what a bad driver installation script.
Although, this has nothing to do with the sudo package. If you run a script as
root, you are vulnerable to all kinds of nastiness.
You should be reporting this issue to the authors of the script. Since there is
nothing we can do to prevent this kind of misuse in the sudo package itself, I
am closing this bug.
Thanks!
** Changed in: sudo (Ubuntu)
Status: Incomplete => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/752649
Title:
corrupt program can add line to "sudo visudo"
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
