[ale] restricting sudo

[Robert.L.Harris at rdlg.net (Robert L. Harris)]

I need to keep some users from executing

/opt/package/bin/ha*.

I have a command alias for sudo that says:

Cmnd_Alias    HAALIAS    = /opt/package/bin/ha*

and this keeps them from executing the full path, but they can do

cd /opt/package/bin/
sudo ./hacommand


It doesn't like the command alias:
Cmnd_Alias    HAALIAS    = /opt/package/bin/ha*, ./ha* 

either.  Thoughts?



:wq!
---------------------------------------------------------------------------
Robert L. Harris                |  Micros~1 :  
Senior System Engineer          |    For when quality, reliability 
  at RnD Consulting             |      and security just aren't
                                \_       that important!
DISCLAIMER:
      These are MY OPINIONS ALONE.  I speak for no-one else.
FYI:
 perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.