/etc/sudoers file on my Red Hat server, I have this line:
%webdevgroup ALL=NOPASSWD: /bin/chmod * /home/http/*
This is clearly a bad idea, since someone could do something like this:
sudo /bin/chmod 777 /home/http/../../etc/sudoers
Is there a safer way to achieve this functionality without opening the server up to this security hole?