FW: Adding OpenBSD sudo to the FreeBSD base system?

Stephen Major smajor at gmail.com
Thu Jul 21 20:26:24 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Thank you!!!

He is saying he wants it to replace su
I do not care what they do with sudo as long as su does not get touched.
And if it is a default in the base system a must would be to leave the ALL
line commented out in the sudoers file. So people who do not want their
users to have access to sudo are not stuck with it being a default. 

- -----Original Message-----
From: owner-freebsd-security at freebsd.org
[mailto:owner-freebsd-security at freebsd.org] On Behalf Of Kurt Seifried
Sent: Thursday, July 21, 2005 1:09 PM
To: freebsd-security at freebsd.org
Subject: Re: Adding OpenBSD sudo to the FreeBSD base system?

Uhh you people realize sudo is COMPLEMENTARY to su? All my Linux and OpenBSD

systems (wait for it.....) have _both_ installed by default. Crazy huh? Some

example commands:

sudo ifconfig blah [enters own password]
sudo su - [enters own password]
sudo sendmail -q [enters own password]
su - [enters root password]

Whoa! what's #2? And what's #4? Holy cow!

Folks, this is by far the stupidest argument/discussion I have ever seen on 
a security related mailing list (and I've been on BugTraq and 
Full-Disclosure for a long time so that's saying something). sudo is 
complementary to su, you can have both, and sudo has 0, repeat 0 (just to 
make sure) I repeat _0_ impact on su. It does not replace su. It does not 
change su's behavior. It does not break su. You can still use su as before, 
your script will work as expected (I promise).

- -Kurt Seifried

_______________________________________________
freebsd-security at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.1 (Build 2185)

iQEVAwUBQuACHqKXvLS903/FAQrJ6QgAsUTD2kvgFPvjjadyb2btN3xWwtEMhyxV
nHd1innapH88wcvolXXaNQEGTy7+ZYdiTuJqhud7Whq5vDA7yBfPnzyY8MrdWHtt
w64qQPgpwlPRs9J7TH08R/oWmgJhsC1k/vz3oYu9n4cmz/ElLVKBQMzkYZykOEE5
04qHhfFogTudLDZ0AO3ArD3OWV7trTZjDFvJ5sE9AOHofjx2LY9Rxc41+l0Sb5K/
g68PvFtspkRjLhrv41H0NQFEmr/RNiktCfanhdVfbsHfwCnUzp1zbt8uFxfn80t5
mv2ZDG/DwWx4IY6eP/y3U12Bj6cQJlcRDh2WO9Nu84KNoDEiggUhZw==
=KXmy
-----END PGP SIGNATURE-----


More information about the freebsd-security mailing list