How-To Prevent command execution in vi - SUDO

From: David.Knight@clubcorp.com
Date: Tue Mar 16 2004 - 08:06:08 EST

• Next message: Douglas B. Jones: "max threads/max user processes"
• Previous message: ElHarti, Hicham: "X-Server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

ALl,
        I am currently in to process of implementing SUDO on my Tru64
Servers. However, I have one question:
1) I need to be able to lock down accounts to the point of only allowing
them access to a very very limited command set I.E Just "ls" "pwd" "cd"
and "vi" however I have found that SUDO is mainly to allow users access
to commands ran by other users. so I figured that I could write a script
to force them to use sudo or a limited command set however I find that if
you allow some one access to the "vi" command they can execute any command
the wish by doing a :! and the command. I have been unable to find any
options to SUDO either on compile time or execution nor with vi that will
prevent this from happening. any help would be grateful.

Thanks in advance,
David Knight

• Next message: Douglas B. Jones: "max threads/max user processes"
• Previous message: ElHarti, Hicham: "X-Server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:53 EDT