sudo and /etc/sudoers
Josh Holland
jshholland at googlemail.com
Sun Dec 28 00:04:54 UTC 2008
On Sun, 2008-12-28 at 10:01 +1000, Res wrote:
> eerrrr sudo caches auth timestamp as you mentioned, its a security risk if
> you close the window, and someone opens it up when you go for a coffee
> and types sudo -i and has a root on your box, no passwd required, sure
> youd have to be unlucky, but it by default exists, at elast when I logout,
> no one gets root axs here.
Sorry to keep this thread alive but 'sudo -k' kills the timestamp.
--
Josh Holland aka madmartian
Find me on #ubuntu-uk
My system: Dell Inspiron 1300 with fully up-to-date Intrepid
Intel Celeron M 1.70 GHz, 512 MB
More information about the ubuntu-users
mailing list