[olug] sudo, svn security backflips
Jeff Hinrichs - DM&T
jeffh at dundeemt.com
Wed Dec 19 01:49:09 UTC 2007
On Dec 18, 2007 7:30 PM, Jay Hannah <jay at jays.net> wrote:
> If your username is "jhannah" and you're in a directory where only the
> username "i3bio" can change files and you have sudo access to run
> commands as "i3bio" and you have "jhannah" access to an SVN repository
> and the files in that directory are in SVN then you can update those
> files via sudo for file access and by passing --username to svn like so:
>
> $ sudo -u i3bio svn update Query.pm --username jhannah
>
You could even be less suave and just,
$ sudo -u i3bio svn update Query.pm
let it fail to find the user i3bio / password and prompt you for a
different username.
--
Jeff Hinrichs
Dundee Media & Technology, Inc
jeffh at dundeemt.com
402.218.1473
More information about the OLUG
mailing list