ubuntu-devel@lists.ubuntu.com
[Top] [All Lists]

Re: Misconfiguration of sudo is insecure (Was: Sudo even more secure)

Subject: Re: Misconfiguration of sudo is insecure Was: Sudo even more secure
From: Matthew East
Date: Sat, 25 Mar 2006 10:44:45 +0000
On Fri, 2006-03-24 at 20:50 +0000, Paul Sladen wrote:
> On Thu, 23 Mar 2006, Yuki Cuss wrote:
> > Please try `sudo -i'. You may find it is a more secure option.
> 
> No.  NO.  Please, no.
> 
> Now you have a shell open where *every* command you type is running with
> unchecked priviliges and it the commands _aren't being logged_.

I don't understand the problem with this. Two senior Ubuntu developers
have recommended the use of this flag with sudo for getting a root
terminal. Can somebody clear this up, because as far as I know 'sudo -i'
is a perfectly safe option and can be recommended in the documentation. 

Matt
-- 
mdke@xxxxxxxxxx
gnupg pub 1024D/0E6B06FF
-- 
ubuntu-devel mailing list
ubuntu-devel@xxxxxxxxxxxxxxxx
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
<Prev in Thread] Current Thread [Next in Thread>