Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Are there any security issues when adding a cmnd_alias for svn to /etc/sudoers?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Well, not if you don't do anything with the alias :)

Assuming you're doing this for a NOPASSWD entry for something, you might want to consider writing shell scripts ( or binaries of some sort ) that perform the specific svn commands you need to be able to run, and then make command aliases for those so that you aren't allowing accidental svn commands that you don't want run.

That's what I would do anyhow -- whitelist to a pretty fine degree of granularity. There aren't any security issues other than the ones that are really obvious that I'm aware of. Someone getting control of the user can run whatever svn commands are allowed. If you go the route of whitelisting via scripts or binaries, someone could replace those scripts or binaries to allow arbitrary execution, but at that point in time your server is rooted anyhow.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.