From 6a5d75b5cc4e417de18c5d0e9423dd5eff724721 Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Tue, 16 Jan 1996 19:37:56 +0000 Subject: [PATCH] updated NO_ROOT_SUDO entry --- OPTIONS | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/OPTIONS b/OPTIONS index b09f4d3fe..92938e8ad 100644 --- a/OPTIONS +++ b/OPTIONS @@ -35,8 +35,9 @@ MAXLOGFILELEN The default is 80. NO_ROOT_SUDO - Don't let root run sudo. This is historical from when doing "sudo sudo" - would give you a root shell. You probably don't want to define this. + Don't let root run sudo. This can be used to prevent people from + "chaining" sudo commands to get a root shell by doing something + like "sudo sudo /bin/sh". This is off by default. ALERTMAIL