Mastering Linux Security and Hardening
上QQ阅读APP看书,第一时间看更新

Preventing users from using other dangerous programs

Some programs that don't have shell escapes can still be dangerous if you give users unrestricted privileges to use them. These include the following:

  • cat
  • cut
  • awk
  • sed

If you must give someone sudo privileges to use one of these programs, it's best to limit their use to only specific files. And, that brings us to our next tip.