[plug] sudo don't

WolfBite wolfbite_aus at yahoo.com
Wed May 4 14:46:41 WST 2005


thanks for the info

my understanding of security is that if you set
specifics, that is the ONLY settings that apply

by using ALL you make portability and access easier
(esp with multiple machine)

but locking down a set machine, if you set the
specifics of access, you lock it down better.

(the old ease of use over security nightmare :)


--- Cameron Patrick <cameron at patrick.wattle.id.au>
wrote:
> WolfBite wrote:
> 
> > localhost doesnt work for me(?)
> > replace exact same command with 192....  works
> > (localhost reconized by browser&ping)
> 
> It's more common to give ALL for the host name
> unless you're sharing
> the same /etc/sudoers file across a bunch of
> machines.  Giving ALL for
> the hostname _doesn't_ allow arbitrary people from
> over the network to
> run commands on your machine, it just disables any
> checking of your
> machine's hostname against the one given in the
> sudoers file.
> 
> While the sudoers man page is a bit inscrutable (in
> true Linux style),
> there's some good stuff in the examples section at
> the end - although
> the examples are generally of more complex uses of
> sudo.
> 
> Cameron.
> 
> _______________________________________________
> PLUG discussion list: plug at plug.org.au
> http://www.plug.org.au/mailman/listinfo/plug
> Committee e-mail: committee at plug.linux.org.au
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



More information about the plug mailing list