From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=+gkrk4B5iZyYy7l0SB8y/+bCK8+8blLe0D8dWbUyG58=; b=adqWQO8cjczNfdPxDmn/ifwS+n5TtH30t21+UO/BNiho3cWduGNkQJZ3we2p3yA/Yp z3Tr0c8GuYt9DK9luHwIlpskdSP22T1mUCX9XKP1FsnNFtf3DNffLrjXQctn48wSyBw7 cft6HAnOzGU2kw786A0FwjVwzB0Ovd3ioNb6Zcb2E6LSf7vBpfgrDq+Q4+yJoCh0Nbwe +Y6J0iK50vllJqT7NvRmsV1HPYhulP6VpQzmXqZDYtzFBPfFtVPG9kC3h1qoMLH/RjVY +NrskdOgOvf61MaLuLFf8jLZ+tsN0SupSdj/Ro7So7DVxHo1Bvv3vokHL9kOa74bgPSg sGIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=+gkrk4B5iZyYy7l0SB8y/+bCK8+8blLe0D8dWbUyG58=; b=Bgkio/kfG5xmAcH5VKjpnD+K6pRW+7E2r+X62RA6FXQ+KOPaz0XKfBkUyTECXmTu2v DrxwNceYnKi57cU+g/A/5mHXuh8NwaUsTp2lOYzQPvzb/ZEXuaweh/uM7C4RoU/J/SRi 8PMBS0ngLYG7nenaFtC80kWjVp+7/A1wjSFYwtYKQShN24VlOGfslRMATQuNBYrALTua qqZoeRKnUMUzEZA/Gc5NjkfX7qDGMyc6K34JeVWE2S6O+pjZWLuRWjaFIav919HwrrBI 1b2B14Jes4YU4IQGtFNSZg9TAUBCiU+otB6Fl+wY/Ox5AH17entPqhyqLToS4JCc2ihw /BQg== X-Gm-Message-State: AGRZ1gKKfqnk+gHuV5kmdNhENwRzh+z9CAXbG4dpv4xWM90uN71Zh1wM MSZXl4wqXqh3UheH+0b5xnbJjcjP X-Google-Smtp-Source: AJdET5dBWvX/UYtfzq52joT8eAdwhiBcejlvKMzNJciqZPyB9LJwaeMInaPM5VqXOoJe2K5ZGw+zZA== X-Received: by 2002:a2e:97d7:: with SMTP id m23-v6mr8268024ljj.18.1541842081078; Sat, 10 Nov 2018 01:28:01 -0800 (PST) To: ALT Linux Team development discussions References: <20181108044420.GA21415@gyle.altlinux.org> <20181108094051.6119ec67@sem-notebook> <8e502cf4-2a70-ae82-dbc8-c059bf8ee430@altlinux.org> <20181108103415.15176576@sem-notebook> <20181108125625.GA23205@imap.altlinux.org> <9fb31f9c-1001-ca97-a655-01370b36cf9d@gmail.com> <20181109111216.GC5965@altlinux.org> From: Stas Message-ID: <82f626e5-6112-0453-936a-cb105508c2f7@gmail.com> Date: Sat, 10 Nov 2018 14:27:58 +0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 In-Reply-To: <20181109111216.GC5965@altlinux.org> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 8bit Subject: Re: [devel] sudo/wheel | Re: [cyber] I: Sisyphus-20181108 bugs: +2 -3 (3144) X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Nov 2018 09:28:04 -0000 Archived-At: List-Archive: List-Post: On 09.11.2018 16:12, Alexey V. Vissarionov wrote: > On 2018-11-09 15:42:41 +0500, Stas wrote: > > > В файле sudoers есть пример, как корректно настраивать запуск > > sudo конкретными пользователями - там для этого предлагается > > использовать группу sudo > > Это вообще должно быть правилом для suid-бинарников. > > > И в каждой установке altlinux я переделываю запуск sudo: > > groupadd sudo > > chown :sudo $(which sudo) > > chmod 750 $(which sudo) > > Здесь, насколько я пони мяу, все же 4750. Разумеется (я писал по памяти). -- Станислав Дёгтев Служба "Ваш админ" Мои контакты: - email: stas.grumbler@gmail.com и stas@vashadmin.su - телефоны в Е-бурге +79045430461, +79222112259, +79505571146, +79193628944