[Qemu-devel] Re: Morphix booting in 1024x768 resolution and Win32 questions

[Sami Haahtinen <ressu@ressukka.net>]

Luca Ferroni wrote:
> The problem of root execution is the script /etc/qemu-ifup which calls ifconfig
> It is not enough to set permissions 755 to this script
> You can use sudo, 
> 
> #!/bin/sh
> sudo /sbin/ifconfig $1 172.20.0.1
> 
> and put your user in /etc/sudoers file
> 
> user	ALL=(ALL) 	NOPASSWD: ALL

EEEEK!

Kids, never ever ever try this at home! You have just granted access to 
any account without any password to anyone who can access your account 
(read, someone who gets you to run a simple script or exploits the 
newest über exploit for the leet mailclient[tm] you were running)

Something that would be a bit more sane would read:
user ALL = NOPASSWD: /sbin/ifconfig

and for someone even more paranoid:
user ALL = NOPASSWD: /sbin/ifconfig tun*

please, do yourself a favour and use one of the above instead of 
granting access to all around the system. the password isn't really that 
much of a pain to write, and it provides security.

Regards, Sami