Bug 547 - RFE: StrictMode for sudo
RFE: StrictMode for sudo
Status: NEW
Product: Sudo
Classification: Unclassified
Component: Sudo
1.8.4
PC Linux
: low enhancement
Assigned To: Todd C. Miller
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-03-13 05:33 MDT by Tong
Modified: 2012-03-13 05:33 MDT (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tong 2012-03-13 05:33:09 MDT
Providing root access via sudo to a script provides an opportunity for exploit: if the directory, or any of the parent directories where the script resides is writeable by a non-root user, there is the opportunity for the script to be replaced with something that gives the non-root user shell access.

Would it be possible for sudo to add a StrictMode (similar to what ssh has for ~/.ssh) to warn about this?