[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sudo-users
Subject:    [sudo-users] FW:  less
From:       alexandre oliveira <alexandresumare () hotmail ! com>
Date:       2009-08-04 22:47:07
Message-ID: SNT116-W466CC4B6E6A8E8384FBCFFBE0C0 () phx ! gbl
[Download RAW message or body]


Viele, I think that it is not a good idea. The command less allows users to escape to \
shell. So, it is not secure.

 

Try to avoid using any command that allows to escape to shell, like vi, more, less.

Using the command cat, the user has privilege to read the file as root, but he/she \
executes the command less as a regular userID.

_______________________
Alexandre


 
> Date: Tue, 4 Aug 2009 08:22:00 +0200
> From: Hullen@t-online.de
> To: sudo-users@sudo.ws
> Subject: Re: [sudo-users] less
> 
> Hallo, alexandre,
> 
> Du meintest am 04.08.09:
> 
> > > I want to let the user view log files, I know I could do it with
> > > standard file permissions but I wanted to log administrative
> > > activity using sudo.
> 
> > You can let users to use /bin/cat to view logfiles. So, they can use:
> > sudo cat /var/log/logfile | less
> 
> [full quote and top post repaired]
> 
> What about
> 
> 
> sudo less /var/log/logfile
> 
> "less" doesn't need "cat".
> 
> Viele Gruesse!
> Helmut
> ____________________________________________________________ 
> sudo-users mailing list <sudo-users@sudo.ws>
> For list information, options, or to unsubscribe, visit:
> http://www.sudo.ws/mailman/listinfo/sudo-users

_________________________________________________________________
Get free photo software from Windows Live
http://www.windowslive.com/online/photos?ocid=PID23393::T:WLMTAGL:ON:WL:en-US:SI_PH_software:082009



[prev in list] [next in list] [prev in thread] [next in thread]