diff options
author | Tavis Ormandy <taviso@gentoo.org> | 2004-12-18 11:22:28 +0000 |
---|---|---|
committer | Tavis Ormandy <taviso@gentoo.org> | 2004-12-18 11:22:28 +0000 |
commit | eb7f75e7119fc57aaec17a79852558e8364c6261 (patch) | |
tree | 61148d4b5ed57b7a1b25e000a8c73559cd106075 /app-admin | |
parent | ~amd64 (Manifest recommit) (diff) | |
download | gentoo-2-eb7f75e7119fc57aaec17a79852558e8364c6261.tar.gz gentoo-2-eb7f75e7119fc57aaec17a79852558e8364c6261.tar.bz2 gentoo-2-eb7f75e7119fc57aaec17a79852558e8364c6261.zip |
add sudoers warnings
Diffstat (limited to 'app-admin')
-rw-r--r-- | app-admin/sudo/ChangeLog | 5 | ||||
-rw-r--r-- | app-admin/sudo/files/sudoers | 12 |
2 files changed, 16 insertions, 1 deletions
diff --git a/app-admin/sudo/ChangeLog b/app-admin/sudo/ChangeLog index 1433db520597..14538cbb8475 100644 --- a/app-admin/sudo/ChangeLog +++ b/app-admin/sudo/ChangeLog @@ -1,6 +1,9 @@ # ChangeLog for app-admin/sudo # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.36 2004/11/23 13:14:15 gmsoft Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.37 2004/12/18 11:22:28 taviso Exp $ + + 18 Dec 2004; Tavis Ormandy <taviso@gentoo.org> files/sudoers: + add suoders warnings 23 Nov 2004; Guy Martin <gmsoft@gentoo.org> sudo-1.6.7_p5-r2.ebuild: Stable on hppa. diff --git a/app-admin/sudo/files/sudoers b/app-admin/sudo/files/sudoers index 3f981b1a5e0f..0f79c8550812 100644 --- a/app-admin/sudo/files/sudoers +++ b/app-admin/sudo/files/sudoers @@ -23,6 +23,18 @@ Defaults env_reset # Runas alias specification +# *** REMEMBER *************************************************** +# * GIVING SUDO ACCESS TO USERS ALLOWS THEM TO RUN THE SPECIFIED * +# * COMMANDS WITH ELEVATED PRIVILEGES. * +# * * +# * ONLY PERMIT SUDO ACCESS SPARINGLY. * +# * * +# * NEVER ALLOW ACCESS TO UNTRUSTED USERS. * +# * * +# * IF YOU DON'T KNOW A COMMAND IS SAFE TO USE WITH SUDO, ASSUME * +# * IT ISNT, AND PERMIT ACCESS ACCORDINGLY. * +# **************************************************************** + # User privilege specification root ALL=(ALL) ALL |