Support 'sudoers' functionality
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 25/100
- Issue 类型
- 功能
- 描述清晰度
- 需要澄清
- 活跃度
- 停滞
- 技术栈
- rust
调研方向
首先阅读 issue 描述以及 RHEL 和 Ubuntu 的 sudoers 参考资料。定义所需的 Windows 模型，以便为组、用户或服务帐户授予对文件夹和可执行文件的限定范围访问权限，并确定如何针对服务器和工作站场景评估完成情况。
由索引模型根据 Issue 内容生成。
描述
Description of the new feature / enhancement
The current granularity available with UAC, group policy, and NTFS permissions is lacking compared to utilizing a 'sudoers' file as supported in Linux implementations of sudo. It would be very useful for win admins to utilize 'sudoers' to further control permissions on a windows system and not grant administrative access to perform certain actions.
My perspective is more on the server side of things, but it could be useful for workstations and systems that don't have or use Active Directory.
Scenario when this would be used?
In an IT organization with multiple tiers of admins, there's a need to prevent certain admins from having Full administrative access.
- Server build team - creates builds from scratch and incorporates any organization's standards and security settings
- Server operations team - responsible for maintenance and operations (patching, resource allocation, etc) of systems. Should not be able to make changes to standards or security settings.
- Software Admin team - responsible for applications installed on the server. Can patch/upgrade software, but not windows or security patches. Should not be able to make changes to standards or security settings.
These 3 different teams currently have full admin access to a server. This can isolated with restricted groups in AD, but that still grants full administrative access to a system that a server operations or software admin team don't necessarily need.
Incorporating 'sudoers' allows granting certain folder and executable permissions to certain groups, users, or service accounts.
Supporting information
- RHEL - Managing sudo access
- Ubuntu - Sudoers
- 主要语言
- Rust
- 星标
- 5.9k
- 派生
- 180
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
microsoft/sudo 的其他 Issue
-
Issue-Bug Needs-Triage
难度 1/5 1 小时以内 新手友好度 74/100
-
Issue-Bug Needs-Triage
难度 3/5 1-2 天 新手友好度 55/100
-
Issue-Feature Needs-Triage
难度 4/5 3-5 天 新手友好度 38/100
-
Issue-Bug Needs-Triage
难度 3/5 1-2 天 新手友好度 65/100
-
Issue-Bug Needs-Triage
难度 4/5 3-5 天 新手友好度 45/100
相似的 Issue
-
ai-priority/P2 bug db/oracle user-priority/P1
难度 2/5 1-3 小时 新手友好度 67/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 70/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 76/100
swc-project/swc#12516 ·
维护者通常 1 天内回复
-
app bug
难度 2/5 1-3 小时 新手友好度 76/100
-
mls-rs-crypto-awslc: exact aws-lc-rs =1.16.3 pin blocks rustls security update可能已有人在做 @muscariello 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 65/100