4 ms·
I think sudo done well could be exactly what you're advocating for: configure all possible commands that a user should be allowed to execute as superuser for or
by teo_zero 3y ago
I think sudo done well could be exactly what you're advocating for: configure all possible commands that a user should be allowed to execute as superuser for ordinary and extra-ordinary maintenance and prohibit everything else (especially sudo -i).
- Dalewyn 3y agoI make liberal use of sudo -i on my personal Linux machines, because otherwise I have to prefix sudo to 99% of my commands and be arsed to enter passwords if I dilly dally too long between commands.
- thfuran 3y agoIf you have to prefix almost all of your commands with sudo, either your usage is highly irregular or your problem is mostly caused by poor file permissions resulting from overuse of sudo.
- charcircuit 3y agoI don't as doing that is as bad as suid binaries except now the binaries aren't even hardened. suid binaries shouldn't exist either.
- josephcsible 3y agoWhat would you replace suid binaries with? Just getting rid of suid without replacement would totally break your system.
- charcircuit 3y agoNormal binaries that talk to services running as other users who have the minimal possible permissions. For example instead having users run ping as the root user using suid, you instead have a ping client talk to a ping service on the system. The ping service runs as a user with the raw sockets capability and nothing else.
- josephcsible 3y agoHow is that an improvement over just giving the ping binary on disk that capability? And how would "su" and "sudo" work in your model?
- charcircuit 3y ago>How is that an improvement over just giving the ping binary on disk that capability? That would be okay too, but not all suid usages can be replaced like that. >And how would "su" and "sudo" work in your model? They wouldn't exist in my model.