I want to prevent sudo
from executing files not owned by root.
so, to allow sudo run such file, I want the file to be:
chown root:root filename
chmod go-w filename
Is it possible to limit sudo
this way?
It should also be inherited by graphical sudo
like runners (gksudo, kdesudo, ...), but I think it could be too much tricky, not sure tho.
chown
itself, and editors likevim
andemacs
which can spawn commands, as well as commands like perl, awk and python, and so on...