Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Like, cat is on this list. And it's like, "you could `sudo cat` a file!" … well … yes?

The `sudo` tag means, if you're naively messing with /etc/sudoers, that allowing passwordless "command" with sudo might be a bad idea.



> if you're naively messing with /etc/sudoers, that allowing passwordless "command" with sudo might be a bad idea.

It might be a bad idea, but that's not "bypassing local security restrictions", that's explicitly changing the local security restrictions such that that's not a restricted command for the user you're granting it to.

If you don't want someone to be able to read any file on the system, no, you shouldn't grant them the ability to run "cat" as root! But "I granted them X" "they ran X" → "they bypassed local security restrictions" is non sequitur.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: