Menu

#5 Allow special case "all" options for -c

open
nobody
None
5
2009-04-27
2009-04-27
Anonymous
No

For -c option, there should be a special switch which allows anything to go through. The reason is that this would provide ability to capture commands with in a script to be logged using sudosh's mechanism. This would be useful because allthough the script is enable in sudoers file, it does not log each an every command that is executed in the script which may change over time (I agree that this is change control issue buth when the script is not maintained by SysAdmin, it is problamatic to know what changed when). This would essentially allow anyone to run "sudo -u root sudosh -c <script>" which will allow logging of the commands that are executed by the script although script is non-interactive.

Discussion


Log in to post a comment.