Bugzilla – Bug 547
RFE: StrictMode for sudo
Last modified: 2012-03-13 05:33:09 MDT
Providing root access via sudo to a script provides an opportunity for exploit: if the directory, or any of the parent directories where the script resides is writeable by a non-root user, there is the opportunity for the script to be replaced with something that gives the non-root user shell access. Would it be possible for sudo to add a StrictMode (similar to what ssh has for ~/.ssh) to warn about this?