Timeline for Is there a criteria for allowing or disallowing the execution of bash scripts as root with sudo?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Sep 7, 2016 at 17:21 | history | suggested | Eloy Roldán Paredes | CC BY-SA 3.0 |
Added conclusion explained in a comment.
|
| Sep 7, 2016 at 17:14 | review | Suggested edits | |||
| S Sep 7, 2016 at 17:21 | |||||
| Sep 7, 2016 at 17:08 | comment | added | Steffen Ullrich |
@EloyRoldánParedes: No script should be authorized without manual analysis. And better all but the most obvious simple bash scripts should not be authorized. Keep in mind also that some programs started from this script can allow escalation of privileges. Typical example is to allow vi /some/special/file where the user can execute arbitrary commands from inside vi with <ESC>:!cmd.
|
|
| Sep 7, 2016 at 17:00 | comment | added | Eloy Roldán Paredes | You have said what I cannot do but, what can I do? Your conclusion is that bash scripts should not be authorized to run as root with sudo? | |
| Sep 7, 2016 at 15:58 | history | answered | Steffen Ullrich | CC BY-SA 3.0 |