Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?

From	Carl <carlf@panix.com>
Newsgroups	linux.debian.user
Subject	Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?
Date	2019-06-19 13:40 +0200
Message-ID	<yaH6y-17a-5@gated-at.bofh.it> (permalink)
References	<yaAop-5zf-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 6/19/19 12:06 AM, Bagas Sanjaya wrote:
>
> Hello all Debian Users,
>
> Consider the hypothetical scenario below.
>
> I often encountered cases on systems in television stations when they 
> configured sudoers like this snippet below:
>
> %remaja ALL=(ALL:ALL) ALL
>
> The rationale for above is most programs on such systems can only be 
> accessed by users which are member of remaja (teens) group via sudo, 
> so their sysadmins giving remaja user group full administrator 
> privileges. Is it dangerous?
>
> Regards, Bagas
>
That is almost as bad as having no security restrictions at all. The
correct thing to do would be to set permissions on the programs to
allow them to be run by group remaja.

I don't say this often. I would immediately fire the person
responsible for instituting this policy on a "production" system. (It
would be a good policy if the system is intended as an educational
environment to allow the teens to ruin things, and learn from
experience.)
-- 
Carl Fink
carl@finknetwork.com

Thread

Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-19 06:30 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? john doe <johndoe65534@mail.com> - 2019-06-19 08:00 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-19 08:10 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-19 13:40 +0200
    Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 07:20 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-20 07:40 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 09:20 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-20 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-20 14:10 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-20 13:00 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 14:50 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-20 18:40 +0200
            Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl Fink <carlf@panix.com> - 2019-06-21 21:50 +0200
              Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 01:00 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 04:30 +0200
                Re: Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 10:40 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 17:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Brad Rogers <brad@fineby.me.uk> - 2019-06-22 18:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 18:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 18:50 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-22 14:20 +0200
              Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 02:40 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 10:10 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 11:50 +0200
                Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 12:30 +0200
                Re: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-22 12:40 +0200
                Off-topic: Action [Was: Re: Off topic: remaja (teens) Erik Christiansen <dvalin@internode.on.net> - 2019-06-22 13:40 +0200
                Re: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-22 23:40 +0200
                Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 01:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 01:50 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 03:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 09:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 10:00 +0200
                Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 10:50 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 16:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) rhkramer@gmail.com - 2019-06-23 18:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic:  remaja (teens) Curt <curty@free.fr> - 2019-06-23 18:30 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 19:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-23 11:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 12:30 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Georgios <gpdsbe@mailbox.org> - 2019-06-23 20:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 22:50 +0200
                Re: Off topic: Carbon. John Hasler <jhasler@newsguy.com> - 2019-06-23 23:10 +0200
                Teenagers (was: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?) rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:30 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Jimmy Johnson <field.engineer@gmail.com> - 2019-06-23 01:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-23 02:10 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-23 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-24 02:40 +0200
            Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-24 02:50 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-25 06:00 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? mick crane <mick.crane@gmail.com> - 2019-06-25 09:10 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Aidan Gauland <aidalgol@fastmail.net> - 2019-06-25 10:00 +0200
      Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-25 10:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-25 14:50 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? andreimpopescu@gmail.com - 2019-07-02 14:50 +0200

csiph-web