From owner-freebsd-hackers  Wed Dec  6 21:41:21 2000
From owner-freebsd-hackers@FreeBSD.ORG  Wed Dec  6 21:41:19 2000
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from gw.gbch.net (gw.gbch.net [203.24.22.66])
	by hub.freebsd.org (Postfix) with SMTP id 7ECFC37B400
	for <hackers@FreeBSD.ORG>; Wed,  6 Dec 2000 21:41:17 -0800 (PST)
Received: (qmail 47137 invoked by uid 1001); 7 Dec 2000 15:41:08 +1000
X-Posted-By: GBA-Post 2.07 04-Dec-2000
X-PGP-Fingerprint: 5A91 6942 8CEA 9DAB B95B  C249 1CE1 493B 2B5A CE30
X-PGP-Public-Key: <http://www.gbch.net/gjb/gjb-pgpkey.asc>
Message-Id: <nospam-3a2f230a9f0b7f7@maxim.gbch.net>
Date: Thu, 07 Dec 2000 15:41:08 +1000
From: Greg Black <gjb@gbch.net>
To: David Talkington <dtalk@prairienet.org>
Cc: Roop Nanuwa <roop@gw.carpoolbc.com>,
	Michael Chong <MichaelC@fool.com>,
	"'hackers@FreeBSD.ORG'" <hackers@FreeBSD.ORG>
Subject: sudo [was: Re: your mail]
References: <Pine.LNX.4.21.0012062249340.1353-100000@sherman.spotnet.org> 
In-reply-to: <Pine.LNX.4.21.0012062249340.1353-100000@sherman.spotnet.org> 
	of Wed, 06 Dec 2000 22:59:24 CST
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

David Talkington wrote:

> sudo definitely helps if it's carefully administered, but it still
> grants root access to a file,

This is wrong -- sudo will grant access with whatever user
privileges you wish to grant, maybe root and maybe some other
user.  It all depends on the way you set it up.

It can also allow a selected set of users to run just one
command with some specific set of arguments.  It is quite a
flexible tool, although that comes at a price -- somewhat
difficult syntax in the config file for non-trivial tricks.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message