[SANS ISC] Using Sudo with Python For More Security Controls

I published the following diary on isc.sans.edu: “Using Sudo with Python For More Security Controls“:

I’m a big fan of the Sudo command. This tool, available on every UNIX flavor, allows system administrators to provide access to certain users/groups to certain commands as root or another user. This is performed with a lot of granularity in the access rights and logging/reporting features. I’m using it for many years and I’m still learning great stuff about it. Yesterday, at the Pass-The-Salt conference, Peter Czanik presented a great feature of Sudo (available since version 1.9): the ability to extend features using Python modules… [Read more]