扔在sudoers文件中:安全与否?


8

在sudoers文件中添加此命令安全吗?

mike ALL= NOPASSWD:/bin/chown -R www-data\:www-data /var/www

这是我要运行的唯一命令

$mike@ubuntu: sudo chown -R www-data:www-data /var/www

谢谢。

Answers:


7

是。

来自man sudoers

   If a Cmnd has associated command line arguments, then the arguments in
   the Cmnd must match exactly those given by the user on the command line
   (or match the wildcards if there are any).  Note that the following
   characters must be escaped with a '\' if they are used in command
   arguments: ',', ':', '=', '\'.  The special command "sudoedit" is used
   to permit a user to run sudo with the -e option (or as sudoedit).  It
   may take command line arguments just as a normal command does.
By using our site, you acknowledge that you have read and understand our Cookie Policy and Privacy Policy.
Licensed under cc by-sa 3.0 with attribution required.