kristovatlas/osx-config-check

advise users to set up limited sudo or do it for them with script

Open

#97 创建于 2016年7月18日

在 GitHub 查看
 (0 评论) (0 反应) (0 负责人)Python (1,248 star) (130 fork)batch import
enhancementhelp wanted

描述

It's not ideal to have uninformed users added to sudoers, because they can be tricked into running stuff with sudo privs.

Feedback here: https://www.reddit.com/r/netsec/comments/4sido1/github_kristovatlasosxconfigcheck_verify_the/d5ezq6i

Reference: http://superuser.com/questions/735172/how-to-prevent-sudo-users-from-running-specific-commands#735286

贡献者指南

技术栈
pythonshell
领域
security
议题类型
security
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
2
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
1-3 hours
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
clear
前置要求
Pythonsudoers file knowledge
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
70
研究方向
The issue requests a feature to advise users or automatically set up limited sudo permissions. To implement, review the existing main script (likely in the repository root) and add a function that checks the sudoers file (e.g., /etc/sudoers) and either prints a warning or modifies it using a script. Consider using a temporary sudoers file to avoid errors. The referenced Reddit and SuperUser links provide context for the security concern.