sudo without a setuid binary or SSH over a UNIX socket

In this post, I will detail how to replace sudo (a setuid binary) by using SSH over a local UNIX socket. I am of the opinion that setuid/setgid binaries are a UNIX legacy that should be deprecated. I will explain the security reasons behind that statement in a future post. This is related to the work of the Confined Users SIG in Fedora. Why bother? The main benefit of this approach is that it enab

[tmatsuu]

sudoの替わりにrootとしてssh接続できるunix domain socketをローカルで待ち受ける案。うん、まぁそうだね。sudoの方が実行コマンド、実行ユーザを制限できるのでsudoの方が良いと思う。