su -c question

vbmark · 11-24-2004, 12:57 PM

If I understand correctly, a user can create a script with:

su -c 'some command'

and it will run as root.

Is this correct and if so isn't this a security breach?

Thanks.

david_ross · 11-24-2004, 01:05 PM

They can do it but they still need to supply the root password. So no, it is a feature, not a security problem.

reddazz · 11-24-2004, 01:40 PM

I mainly use that feature for installing source packages and I view it more like a security feature that you can use to avoid logging in as root.