Hacker News Reader

Comment by Someone | Hacker News Reader

I don’t understand. If you can run

  usr/bin/sudo /usr/bin/journalctl

, what stops you from running

  usr/bin/sudo /usr/bin/bash

instead?

Some users can have permission to execute specific commands through sudo.

and if you as a sysadmin dont know these program that you allow to execute, wellll that is a bigger problem

Of course, when one can just add the user account to the systemd-journal group, it is questionable why one would grant access via sudo.