4 ms·
Are you saying that granting limited sudo access to only specific programs is rare? That's the standard way to do it in every large enterprise, you just don't g
by SteveNuts 9y ago
Are you saying that granting limited sudo access to only specific programs is rare? That's the standard way to do it in every large enterprise, you just don't grant sudo all.
Only in the cloud space is the "sudo all nopasswd" a thing (ubuntu user on AWS).
- rkeene2 9y agoUnless you are very particular about the commands added, most configurations end up being equivariant to ALL. Some examples I've seen: ip, less, vi, tar, cp, mv, mount, chmod, chown, zip, mysql, dd, ... Any of those and many many more allow for trivial jumping to any command as the target user and you're not improving your security posture compared to ALL, though you make some work harder and some mistakes less likely.