Beefy Boxes and Bandwidth Generously Provided by pair Networks
Think about Loose Coupling
 
PerlMonks  

Re: Re: Re: Re: qx//, ssh -t (pseudo-tty) and sudo

by shockme (Chaplain)
on Nov 12, 2003 at 01:19 UTC ( #306447=note: print w/ replies, xml ) Need Help??


in reply to Re: Re: Re: qx//, ssh -t (pseudo-tty) and sudo
in thread qx//, ssh -t (pseudo-tty) and sudo

Given that /etc/sudoers is supposed to be read-only (444), this smacks of an insecure installation.

However, my point was not that sudo is perfection, only that it is far more preferable to allowing root access to ssh.

If things get any worse, I'll have to ask you to stop helping me.


Comment on Re: Re: Re: Re: qx//, ssh -t (pseudo-tty) and sudo
Re: Re: Re: Re: Re: qx//, ssh -t (pseudo-tty) and sudo
by Roger (Parson) on Nov 12, 2003 at 02:31 UTC
    Yes I agree with you that sudo is better than direct root acess. And on my system I don't allow remote root login anyway.

    Given that /etc/sudoers is supposed to be read-only (444), this smacks of an insecure installation.

    Yes the /etc/sudoers file was read-only, but my script does -
    chmod u+w /etc/sudoers ... bits to modify my sudoers entry ... chmod u-w /etc/sudoers
    When I do a sudo make, *every* command inside the Makefile are automatically run with ROOT priviledges, so there is no secure system when I can do "sudo make". :)

    (I know this is OT, but interesting to know and talk about. So one thing I never do is to give people sudo access on make)

      Okay, then you're original statement (Roger thinks ssh->root is as secure/insecure as ssh->sudo.) is somewhat qualified. I can live with that. It was that statement that led to my original reply. They're not the same, and I think we've both made that clear.

      The end. ;)

      If things get any worse, I'll have to ask you to stop helping me.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://306447]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others browsing the Monastery: (7)
As of 2014-09-30 22:01 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    How do you remember the number of days in each month?











    Results (385 votes), past polls