Sudo ...

Tom Jones tomjones at centurylink.net
Fri Feb 5 14:23:38 MST 2016


It's safer to use the direct path.

Although unlikely,  someone could change the symlink to point to something you would prefer the user not have access to.

TJ

Sent from TypeApp



On Feb 5, 2016, 2:19 PM, at 2:19 PM, "Snyder, Alexander" <alex at misteralexander.com> wrote:
>Does anyone know if you grant sudo access to a symlink, does that grant
>access to the destination?
>
>Like this ... inside the sudoers file, I have:
>
>/bin/cat * /home/user/logs
>
>"logs" is a symlink pointing to:  /var/log/httpd/
>
>will that work, or will i need to specify the direct path?
>
>Thanks,
>Alex.
>
>
>------------------------------------------------------------------------
>
>---------------------------------------------------
>PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
>To subscribe, unsubscribe, or to change your mail settings:
>http://lists.phxlinux.org/mailman/listinfo/plug-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20160205/30348140/attachment-0001.html>


More information about the PLUG-discuss mailing list