sudo [PSARC/2008/370 FastTrack timeout 06/17/2008]

[James Carlson]

Darren J Moffat writes:
> Garrett D'Amore wrote:
> > Finally, how will an unconfigured sudo installation behave?  (More to 
> 
> The default case isn't actually unconfigured.  This case ships the 
> default /etc/sudoers file (in the materials dir).
> 
> The default sudoers file only allows root to use sudo.

Possibly dumb question time: is that safe?  What if root's privileges
are configured to be less than "everything?"  Won't installation of
this package (by way of its setuid bit on sudo and its default
configuration) then allow the previously-restricted root user to gain
privileges by default?

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677