Bug 130 – Authorization by tty

Bug 130 - Authorization by tty


Summary:	Authorization by tty

Status:	ASSIGNED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.6.7
Hardware:	All AIX

Importance:	low enhancement
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2004-02-27 19:45 MST by Rob Kaper
Modified:	2004-05-12 18:50 MDT (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Rob Kaper 2004-02-27 19:45:02 MST

I'd love an enhancement where sudo can authorize by tty. Examples: 
 
- give users with physical access to a machine additional privileges. 
- add security by combining timestamp authorizations with ttys, effectively 
  causing a sudo of a user on one tty to still require authorization on any 
  other tty. This will *greatly* enhance security.

Comment 1 Todd C. Miller 2004-05-12 14:50:16 MDT

You can already do per-tty timestamps, see the tty_tickets sudoers option.