note 61873 deleted from function.exec by danbrown
| From: | danbrown@php.net | Date: | Sun, 04 Jan 2009 16:25:32 +0000 |
| Subject: | note 61873 deleted from function.exec by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-148801@lists.php.net to get a copy of this message | ||
Note Submitter: hanno at theuprightape dot net
----
(quoting rassehund) "Just find sudoers in your system and add there rights to NOBODY."
This is, of course, a MAJOR security risk. You don't need sudo if you use it like that, you
might just as well change permissions for all commands and paths.
For remote server administration, if I don't use ssh, I would let root run cronjobs that look
at configuration parameters which were set using a web interface, preferrably using a database (for
comfort) and input checks (for security). The logging/status/statistical information that the
cronjobs produce are also made available via a web interface.
That way, you don't have to perforate your security mechanisms. And one more personal opinion:
sudo isn't that safe anyway: ever tried "sudo bash" or "sudo vi"? I would
avoid using it, if you get groups and permissions right, you are not going to need it.