sudo: add kill-child.sh

ultimately, a non-previlieged child cannot kill previlieged parent.
all the notes and research in shell.js are not useful.
This commit is contained in:
Girish Ramakrishnan
2025-07-16 20:37:13 +02:00
parent e4ceedcac6
commit e03beba9bc
3 changed files with 55 additions and 6 deletions

View File

@@ -71,4 +71,7 @@ yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/hdparm.sh
Defaults!/home/yellowtent/box/src/scripts/hdparm.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/logtail.sh
Defaults!/home/yellowtent/box/src/scripts/kill-child.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/kill-child.sh
cloudron-support ALL=(ALL) NOPASSWD: ALL