Re: [orca-list] Orca and Administration in Ubuntu 8.04 steps.

[Daniel Dalton <d dalton iinet net au>]

On Mon, 19 May 2008, Jason White wrote:

> On Mon, May 19, 2008 at 10:48:20AM +0100, Alastair Irving wrote:
> > I'm not sure I agree with some of your permision changes.  In particular,
> > doesn't putting /etc/sudoers to 777 make it readable writable and executable
> > by everyone?  Then, since sudoers controls who can do what with sudo, surely
> > anyone can gain root access just by modifying the file?
>
> Correct. This is guaranteed to give you a major security problem.

Exactly, even though it won't work you can still add your user name to 
sudoers.
Luckily, sudo is a little bit smart and won't work. If its 777, you get 
this error:
sudo: /etc/sudoers is mode 0777, should be 0440

I think you aren't at a very big risk because chmod requires root, but its 
still not good.

--
Daniel Dalton

http://members.iinet.net.au/~ddalton/
<d dalton iinet net au>