[olug] sudo, svn security backflips

Jeff Hinrichs - DM&T jeffh at dundeemt.com
Wed Dec 19 01:49:09 UTC 2007


On Dec 18, 2007 7:30 PM, Jay Hannah <jay at jays.net> wrote:
> If your username is "jhannah" and you're in a directory where only the
> username "i3bio" can change files and you have sudo access to run
> commands as "i3bio" and you have "jhannah" access to an SVN repository
> and the files in that directory are in SVN then you can update those
> files via sudo for file access and by passing --username to svn like so:
>
>   $ sudo -u i3bio svn update Query.pm --username jhannah
>
You could even be less suave and just,
    $ sudo -u i3bio svn update Query.pm
let it fail to find the user i3bio / password and prompt you for a
different username.

-- 
Jeff Hinrichs
Dundee Media & Technology, Inc
jeffh at dundeemt.com
402.218.1473



More information about the OLUG mailing list