If sudo is broken, what should be used instead?

Posted by ivant on Server Fault See other posts from Server Fault or by ivant
Published on 2012-09-04T23:47:47Z Indexed on 2012/09/05 3:40 UTC
Read the original article Hit count: 468

Filed under:
|

I found the following answer to a FAQ question about a security problem in Oprofile:

This "problem" only occurs if you actively, and mistakenly, configure access to OProfile via sudo. OProfile uses shell scripts which have not been audited (nor is it likely to happen) for use through the broken sudo facility (anything that lets you alter root's path arbitrarily counts as horribly broken). Do not use sudo!

As I see it, the author of the answer suggests that sudo is broken, so that it should not be used not only with oprofile, but for other purposes as well. Are there better alternatives to sudo in Linux?

© Server Fault or respective owner

Related posts about security

Related posts about sudo