It's safer to use the direct path.

Although unlikely,  someone could change the symlink to point to something you would prefer the user not have access to.

TJ

Sent from TypeApp

On Feb 5, 2016, at 2:19 PM, "Snyder, Alexander" <alex@misteralexander.com> wrote:
Does anyone know if you grant sudo access to a symlink, does that grant access to the destination?

Like this ... inside the sudoers file, I have:

/bin/cat * /home/user/logs

"logs" is a symlink pointing to:  /var/log/httpd/

will that work, or will i need to specify the direct path?

Thanks,
Alex.


PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss