Mastering Linux Security and Hardening - Second Edition

Preventing users from using other dangerous programs

Some programs that don't have shell escapes can still be dangerous if you give users unrestricted privileges to use them. These include the following:

• cat
• cut
• awk
• sed

If you must give someone sudo privileges to use one of these programs, it's best to limit their use to only specific files. And that brings us to our next tip.