[984] in linux-security and linux-alert archive
[linux-security] Re: SUDO problems
daemon@ATHENA.MIT.EDU (Jeremy Heffner)
Wed Jul 31 04:01:35 1996
To: linux-security@tarsier.cv.nrao.edu
Date: Tue, 30 Jul 1996 14:39:17 -0600
From: Jeremy Heffner <heffner@medinah.televiso.com>
[...snip...]
>> However, if there is another terminal logged in, or logs in, during
that
>> period, they can use SUDO without entering a passwd. SUDO asks for a
[...snip...]
>New versions of sudo fixed this: they have a compile-time option to check
>the tty the user is using as well as the accountname. You'll still can't
[...snip...]
There is also the #DEFINE to set the timeout value. If you are really
paranoid, and dont favor using xlock, why not just set that to 0?
-jeremy
-------------------------------------------------------------------------
Jeremy Heffner | Televiso.com System Administration
Finger for PGP public-key | My thoughts, my brains, noone else's
-------------------------------------------------------------------------
