New answers tagged

1

Your idea would be easily doable by means of a small "set-userID-root" program which would only perform a setgroups(2) with all the current groups (as per getgroups(2)) except the sudo one, effectively dropping it. The set-userID-root is required because setgroups(2) is a privileged operation. On Linux it could even be simpler as you could leverage ...


1

$ alias sudo="echo sudon't " $ sudo su - root sudon't su - root This will just break it where it's calling sudo, unless it's calling the full path like /usr/bin/sudo


0

This isn't a definitive answer but I can report how I fixed it. All http requests were redirected to https, though I'm not clear where that was done. This meant that the vhosts for *:80 were ignored and the *:443 ones were the ones used. I moved the auth stuff to the *:443 vhost and preceded it with a "Require all denied" and it now requests the ...


0

The VMs in public cloud does not have access to your laptop's USB port. You may use ssh authentication based on the certificate inside your smartcard. Please have a look at Putty-CAC project. Here there is a detailed setup tutorial


0

This is a common issue. The Apache documentation suggests using the <Location /> directive instead of <Directory />. The following example VirtualHost should provide you with functional Basic Authentication: <VirtualHost *:80> ServerName example.com DocumentRoot "/srv/www/htdocs/" <Location /> ...


0

I have written nginx-auth-saslauthd, which interfaces nginx with the saslauthd daemon and provides Basic authentication. The saslauthd daemon supports LDAP as well as PAM.


Top 50 recent answers are included