Bug 124

Summary:	perms of a dir should be set to 2774 to be able to 'sudo ls /blah/*'
Product:	Sudo	Reporter:	olivier bouvry <olivier.bouvry>
Component:	Sudo	Assignee:	Todd C. Miller <Todd.Miller>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	normal
Version:	1.6.5
Hardware:	IBM
OS:	AIX

Description olivier bouvry 2003-10-28 08:10:55 MST

Hi,

When the permissions of a directory are set to 2770 and I try to run 
execute:'sudo ls /ux/oracle/*' I get the error:
ls: 0653-341 The file /ux/oracle/* does not exist.
When I set perms to 2774 the 'sudo ls /ux/oracle/*' it works.

Below you'll find the exact output from the prompt:

Thanks in advance,


Olivier.

drwxrws---   3 root     dba            5632 Oct 20 10:13 oracle

cpu205:iolbade(*) / > sudo ls /ux/oracle/*
ls: 0653-341 The file /ux/oracle/* does not exist.
cpu205:iolbade(*) / > sudo ls /ux/oracle/sap_dbverify_weekly.ksh
/ux/oracle/sap_dbverify_weekly.ksh
cpu205:iolbade(*) / > sudo ls /ux/oracle/sap_dbverify_*.ksh
ls: 0653-341 The file /ux/oracle/sap_dbverify_*.ksh does not exist.

drwxrwsr--   3 root     dba            5632 Oct 20 10:13 oracle

cpu205:iolbade(*) / > sudo ls /ux/oracle/*
/ux/oracle/DbExpChk                          /ux/oracle/oradba_sqlareadiskreads
.sql
/ux/oracle/ExpPar.sh                         /ux/oracle/oradba_sqlcpu.sql
/ux/oracle/RepUtlstat.sh                     /ux/oracle/oradba_sqlio.sql
/ux/oracle/check_brconnect_logs.ksh          /ux/oracle/oradba_statname.sql
/ux/oracle/check_space.sql                   /ux/oracle/oradba_sysstat.sql
/ux/oracle/check_space_lmts.sql              /ux/oracle/oradba_sysstatreset.sql
/ux/oracle/checkdb                           /ux/oracle/oradba_systemcumulwait.
sql
/ux/oracle/compare_scripts.ksh               /ux/oracle/oradba_systemcurrentwai
t.sql
/ux/oracle/dbverify_database.ksh             /ux/oracle/oradba_tbclust.sql
/ux/oracle/dbverify_database80.ksh           /ux/oracle/oradba_tbdet.sql
/ux/oracle/dbverify_database_parallel.ksh    /ux/oracle/oradba_tbdetsw.sql
/ux/oracle/expstart.tpl                      /ux/oracle/oradba_traperror.tpl
/ux/oracle/list_sapdba.sql                   /ux/oracle/oradba_ts_size.sql
/ux/oracle/list_sapdba_files.sql             /ux/oracle/oradba_tsdf.sql
/ux/oracle/mop.ksh                           /ux/oracle/oradba_tsfiles.sql
/ux/oracle/mop.sql                           /ux/oracle/oradba_tsfilesno.sql
/ux/oracle/odysseus_script_template.ksh      /ux/oracle/oradba_tsixstat.sql
/ux/oracle/oracle.post                       /ux/oracle/oradba_tsoverflow.sql

Comment 1 Todd C. Miller 2003-10-28 09:20:44 MST

This is not a bug.  Wildcards (aka shell meta characters) are expanded by your shell, not sudo.  Since your userid does not have permission to list the directory, the shell passes things verbatim to sudo which in turn, passes it to ls.