Bug 124 – perms of a dir should be set to 2774 to be able to 'sudo ls /blah/*'

Bug 124 - perms of a dir should be set to 2774 to be able to 'sudo ls /blah/*'


Summary:	perms of a dir should be set to 2774 to be able to 'sudo ls /blah/*'

Status:	RESOLVED INVALID

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.6.5
Hardware:	IBM AIX

Importance:	normal normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2003-10-28 08:10 MST by olivier bouvry
Modified:	2003-10-28 13:20 MST (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description olivier bouvry 2003-10-28 08:10:55 MST

Hi,

When the permissions of a directory are set to 2770 and I try to run 
execute:'sudo ls /ux/oracle/*' I get the error:
ls: 0653-341 The file /ux/oracle/* does not exist.
When I set perms to 2774 the 'sudo ls /ux/oracle/*' it works.

Below you'll find the exact output from the prompt:

Thanks in advance,


Olivier.

drwxrws---   3 root     dba            5632 Oct 20 10:13 oracle

cpu205:iolbade(*) / > sudo ls /ux/oracle/*
ls: 0653-341 The file /ux/oracle/* does not exist.
cpu205:iolbade(*) / > sudo ls /ux/oracle/sap_dbverify_weekly.ksh
/ux/oracle/sap_dbverify_weekly.ksh
cpu205:iolbade(*) / > sudo ls /ux/oracle/sap_dbverify_*.ksh
ls: 0653-341 The file /ux/oracle/sap_dbverify_*.ksh does not exist.

drwxrwsr--   3 root     dba            5632 Oct 20 10:13 oracle

cpu205:iolbade(*) / > sudo ls /ux/oracle/*
/ux/oracle/DbExpChk                          /ux/oracle/oradba_sqlareadiskreads
.sql
/ux/oracle/ExpPar.sh                         /ux/oracle/oradba_sqlcpu.sql
/ux/oracle/RepUtlstat.sh                     /ux/oracle/oradba_sqlio.sql
/ux/oracle/check_brconnect_logs.ksh          /ux/oracle/oradba_statname.sql
/ux/oracle/check_space.sql                   /ux/oracle/oradba_sysstat.sql
/ux/oracle/check_space_lmts.sql              /ux/oracle/oradba_sysstatreset.sql
/ux/oracle/checkdb                           /ux/oracle/oradba_systemcumulwait.
sql
/ux/oracle/compare_scripts.ksh               /ux/oracle/oradba_systemcurrentwai
t.sql
/ux/oracle/dbverify_database.ksh             /ux/oracle/oradba_tbclust.sql
/ux/oracle/dbverify_database80.ksh           /ux/oracle/oradba_tbdet.sql
/ux/oracle/dbverify_database_parallel.ksh    /ux/oracle/oradba_tbdetsw.sql
/ux/oracle/expstart.tpl                      /ux/oracle/oradba_traperror.tpl
/ux/oracle/list_sapdba.sql                   /ux/oracle/oradba_ts_size.sql
/ux/oracle/list_sapdba_files.sql             /ux/oracle/oradba_tsdf.sql
/ux/oracle/mop.ksh                           /ux/oracle/oradba_tsfiles.sql
/ux/oracle/mop.sql                           /ux/oracle/oradba_tsfilesno.sql
/ux/oracle/odysseus_script_template.ksh      /ux/oracle/oradba_tsixstat.sql
/ux/oracle/oracle.post                       /ux/oracle/oradba_tsoverflow.sql

Comment 1 Todd C. Miller 2003-10-28 09:20:44 MST

This is not a bug.  Wildcards (aka shell meta characters) are expanded by your shell, not sudo.  Since your userid does not have permission to list the directory, the shell passes things verbatim to sudo which in turn, passes it to ls.