Re: [TCLUG:21119] RH 5.1 question (sudo!)

[Callum Lerwick <lerwick@tcfreenet.org>]

> Cmnd_Alias CDBURN = /usr/bin/xcdroast, /usr/bin/cdrecord, /usr/bin/mkisofs,
> /usr/bin/cdparanoia
> 
> Pretty slick. Downside of sudo (from a usiblaty standpoint) is you have to
> define everything the frontend uses, I tried just putting xcdroast there
> with a no go. From a security standpoint, this is a good thing.

I don't get this. If xcdroast get root, shouldn't everything it calls be
root too? Can you make xcdroast call cdrecord and such through sudo?