Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 7 Oct 2000 03:14:16 -0500
From:      "David J. Kanter" <david.kanter@mindspring.com>
To:        FreeBSD stable <freebsd-stable@freebsd.org>
Subject:   Security problem with "script"?
Message-ID:  <20001007031416.A1389@freebsd.mindspring.com>

next in thread | raw e-mail | index | archive | help
I don't know if this is an issue or not, but using the script program with
sudo seems to switch the sudoer's id to root.

Here's an example:

david@/usr/src % whoami
david
david@/usr/src % sudo script /usr/tmp/buildworld
Script started, output file is /usr/tmp/buildworld
root@/usr/src % whoami
root
root@/usr/src %

Is this a security problem?
-- 
David Kanter



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001007031416.A1389>