Sudo and its alternatives

Posted Feb 22, 2024 16:59 UTC (Thu) by mchouque (subscriber, #62087)
Parent article: Sudo and its alternatives

My experience with sudo tells me the first problem isn't necessarily sudo's code by itself but the syntax used to configure it.

I have seen so many issues with wildcards: people thinking they're writing some kind of regexes while they're really configuring globbing. Yes, it's documented as such in man 5 sudoers but I've been able to become root so many times because of that it's not even funny.

And if you need to use wildcards and to exclude some uses/arguments, it's often a nightmare to write exclusion rules with '!'.