Martin Pitt martin.pitt at
Thu Nov 24 14:38:19 CST 2005


Martin Pitt [2005-11-24 21:26 +0100]:
> That would be wrong. Adding the group is fine, and giving it sudo
> privileges *if it did not exist before* is fine, too, but putting
> users into new groups is wrong.

... This can lead to unexpected privilege escalation, and also would
probably break horribly when using a centralized authentication
database (NIS, LDAP, etc).


Martin Pitt
Ubuntu Developer
Debian Developer

In a world without walls and fences, who needs Windows and Gates?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :

More information about the ubuntu-devel mailing list