I've got a Perl test script, initiated with
prove, that tests a backup script that requires root privileges so rsync can change the permissions on the files it downloaded from a remote server.
So I've got the following in my Mac's sudoers file:
root ALL=(ALL) ALL %admin ALL=(ALL) ALL %admin ALL=(ALL) NOPASSWD:/path/to/prove
It works. But my question is, since
prove can be used to run pretty much any perl script written by the local user, is this a huge security risk?