4 ms·
But you implied that sudo could limit privileges to only those needed for the task based on your reply to the original poster. While sudo can limit the user to
by binarycrusader 15y ago
But you implied that sudo could limit privileges to only those needed for the task based on your reply to the original poster. While sudo can limit the user to only running a utility for printer configuration, as an example, it can't limit the actions of that utility, so my point stands.
- rbanffy 15y agoI wonder if SELinux could be used to accomplish that. IIRC, you can limit actions of programs to a given limited context, but I'm out of my depth. Still, you don't need to give the root password (Linus' rant) with sudo and you'd have to maliciously use the programs you need to run. So, while in theory, your printer configuration utility could increase your privileges under sudo, I'm not aware of any such printer configuration utilities.