lista de comandos para incrementar sudo

xiloba
(usa Slackware)

Enviado em 02/05/2010 - 07:49h

Existem alguns comandos que devem ser evitados no sudo a fim de criar uma segurança maior, tipo /usr/bin/passwd *root*
Quais seriam outros para adicionar ao arquivo?

# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

Defaults env_reset

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow members of group sudo to not need a password
# (Note that later entries override this, so you might need to move
# it further down)
# %sudo ALL=NOPASSWD: ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
jj ALL=NOPASSWD: ALL, !/usr/bin/passwd, /usr/bin/rm