Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can I use the value of an environment variable in a sudoers rule

0 views
Skip to first unread message

Andy

unread,
Nov 17, 2009, 1:34:49 PM11/17/09
to
I want to do something like

ALL ALL=/bin/mount -o loop -t ext3 $HOME/* $HOME/*

to allow users to loopback mount a filesystem image, but only in their
own home directory.
by doing, for example

$ sudo /bin/mount -o loop -t ext3 $HOME/imagefile $HOME/mountpoint

That one passes the value of $HOME to sudo and rule doesn't match.
Single quoting $HOME to avoid shell interpretaion passes $HOME to /
bin/
mount which
fails to understand.

I have set my /etc/sudoers to preserve the value of $HOME.
It will work with '/bin/bash' inserted but that seems wide open to
abuse.
Is there any way to get sudo to use the value of $HOME in a rule?

best

Andy

0 new messages