Difference between revisions of "Sudo"

From CBLFS
Jump to navigationJump to search
(I added the package description from BLFS.)
m (I reformatted the "Contents" section to use tables.)
Line 75: Line 75:
 
== Content ==
 
== Content ==
  
The sudo package allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while logging the commands and arguments.
+
{| style="text-align: left;"
 
+
|-
Installed Programs: sudo, sudoedit, and visudo
+
! Installed Programs:
 
+
| sudo, sudoedit, and visudo
Installed Library: sudo_noexec.so
+
|-
 
+
! Installed Libraries:
Installed Directories: None
+
| sudo_noexec.so
 +
|-
 +
! Installed Directories:
 +
| None
 +
|}
  
 
=== Short Descriptions ===
 
=== Short Descriptions ===
 
+
{| style="text-align: left;"
sudo: executes a command as another user as permitted by the /etc/sudoers configuration file.
+
|-
 
+
! sudo
sudoedit: is a hard link to sudo that implies the -e option to invoke an editor as another user.
+
|executes a command as another user as permitted by the /etc/sudoers configuration file.
 
+
|-
visudo: allows for safer editing of the sudoers file.
+
! sudoedit
 
+
| is a hard link to sudo that implies the -e option to invoke an editor as another user.
sudo_noexec.so: enables support for the "noexec" functionality which prevents a dynamically-linked program being run by sudo from executing another program (think shell escapes).
+
|-
 +
! visudo
 +
|allows for safer editing of the sudoers file.
 +
|-
 +
!sudo_noexec.so
 +
| enables support for the "noexec" functionality which prevents a dynamically-linked program being run by sudo from executing another program (think shell escapes).
 +
|}

Revision as of 16:50, 7 December 2006

Download Source: http://www.courtesan.com/sudo/dist/sudo-1.6.8p12.tar.gz
Download Patch: http://www.linuxfromscratch.org/patches/blfs/svn/sudo-1.6.8p12-envvar_fix-1.patch

Introduction to Sudo

The sudo package allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while logging the commands and arguments.

Dependencies

Non-Multilib

Compile the package:

patch -Np1 -i ../sudo-1.6.8p12-envvar_fix-1.patch &&
./configure --prefix=/usr --libexecdir=/usr/lib \
    --enable-noargs-shell --with-ignore-dot --with-all-insults \
    --enable-shell-sets-home &&
make

Install the package

make install

Multilib

32Bit

Compile the package:

patch -Np1 -i ../sudo-1.6.8p12-envvar_fix-1.patch &&
CC="gcc ${BUILD32}" ./configure --prefix=/usr --libexecdir=/usr/lib \
    --enable-noargs-shell --with-ignore-dot --with-all-insults \
    --enable-shell-sets-home &&
make

Install the package

make install

N32

Compile the package:

patch -Np1 -i ../sudo-1.6.8p12-envvar_fix-1.patch &&
CC="gcc ${BUILDN32}" ./configure --prefix=/usr --libdir=/usr/lib32 --libexecdir=/usr/lib \
    --enable-noargs-shell --with-ignore-dot --with-all-insults \
    --enable-shell-sets-home &&
make

Install the package

make install

64Bit

Compile the package:

patch -Np1 -i ../sudo-1.6.8p12-envvar_fix-1.patch &&
CC="gcc ${BUILD64}" ./configure --prefix=/usr --libdir=/usr/lib64 --libexecdir=/usr/lib \
    --enable-noargs-shell --with-ignore-dot --with-all-insults \
    --enable-shell-sets-home &&
make

Install the package

make install

Content

Installed Programs: sudo, sudoedit, and visudo
Installed Libraries: sudo_noexec.so
Installed Directories: None

Short Descriptions

sudo executes a command as another user as permitted by the /etc/sudoers configuration file.
sudoedit is a hard link to sudo that implies the -e option to invoke an editor as another user.
visudo allows for safer editing of the sudoers file.
sudo_noexec.so enables support for the "noexec" functionality which prevents a dynamically-linked program being run by sudo from executing another program (think shell escapes).