bugTiger UNIX security tool - Bugs: bug #36488, Add "visudo -c" check

 
 

bug #36488: Add "visudo -c" check

Submitter:  pyllyukko <pyllyukko>
Submitted:  Thu 17 May 2012 07:46:34 PM UTC
   
 
Category:  Security check modules Severity:  1 - Wishlist
Item Group:  Feature Request Status:  Fixed
Privacy:  Public Assigned to:  jfs
Open/Closed:  Open Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 04 Feb 2018 01:58:09 PM UTC, comment #1: 

Thank you for the suggestion, I have introduced a new check in check_passwd that does exactly this: if the visudo command is present and the user running the script can read /etc/sudoers then 'visudo -cq' is executed and a failure (or not) is shown based on its output.

This check has been pushed to the GIT repository and will be available in future releases.

Apologies for taking so long to fix this bug.

Javier Fernandez-Sanguino Peña <jfs>
Group administrator
Thu 17 May 2012 07:46:34 PM UTC, original submission:  

The command "visudo -c" could be added to some existing script.

It check for the syntax on the /etc/sudoers file.

Example:

# visudo -c
/etc/sudoers: parsed OK

pyllyukko <pyllyukko>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jfs (Updated the item)
  • -email is unavailable- added by pyllyukko (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-02-04 jfs StatusNone Fixed
    2018-02-04 jfs Severity5-Critical 1 - Wishlist
        Assigned toNone jfs

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code