Tiger UNIX security tool - Bugs: bug #36488, Add "visudo -c" check

Group

Main
- Main
- View members
- Search
Homepage
Download
Support
- Submit new
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Mailing lists
Source code
Bugs
- Submit new
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Tasks
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Patches
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
News
- Browse
- Atom feed
- ~~Submit~~
- ~~Manage~~

bug #36488: Add "visudo -c" check

Submitter:	pyllyukko <pyllyukko>
Submitted:	Thu 17 May 2012 07:46:34 PM UTC


Category:	Security check modules	Severity:	1 - Wishlist
Item Group:	Feature Request	Status:	Fixed
Privacy:	Public	Assigned to:	jfs
Open/Closed:	Open	Operating System:	None

* Mandatory Fields

Add a New Comment Rich Markup

Sun 04 Feb 2018 01:58:09 PM UTC, comment #1:

Thank you for the suggestion, I have introduced a new check in check_passwd that does exactly this: if the visudo command is present and the user running the script can read /etc/sudoers then 'visudo -cq' is executed and a failure (or not) is shown based on its output.

This check has been pushed to the GIT repository and will be available in future releases.

Apologies for taking so long to fix this bug.

Javier Fernandez-Sanguino Peña <jfs>

Thu 17 May 2012 07:46:34 PM UTC, original submission:

The command "visudo -c" could be added to some existing script.

It check for the syntax on the /etc/sudoers file.

Example:

# visudo -c
/etc/sudoers: parsed OK

pyllyukko <pyllyukko>

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:


Comment:

No files currently attached

Depends on the following items: None found

Items that depend on this one: None found

Carbon-Copy List

-email is unavailable- added by jfs (Updated the item)

-email is unavailable- added by pyllyukko (Submitted the item)

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

Please enter the title of George Orwell's famous dystopian book (it's a date):

Follow 3 latest changes.

Date	Changed by	Updated Field	Previous Value	Replaced by
2018-02-04	jfs	Status	None	Fixed
2018-02-04	jfs	Severity	5-Critical	1 - Wishlist
		Assigned to	None	jfs

Tiger UNIX security tool - Bugs: bug #36488, Add "visudo -c" check

bug #36488: Add "visudo -c" check

<a href="#postcomment">Post a Comment</a>

<a href="#discussion">Discussion</a>

<a href="#attached">Attached Files</a>

<a href="#dependencies">Dependencies</a>

<a href="#cc">Mail Notification Carbon-Copy List</a>

<a href="#votes">Votes</a>

<a href="#history">History</a>