[CentOS] Giving full administrator privileges through sudo on production systems

Thu Aug 29 15:53:30 UTC 2019
Jonathan Billings <billings at negate.org>

On Thu, Aug 29, 2019 at 10:25:50AM -0500, Valeri Galtsev wrote:
> root at point:/home/valeri # cd
> root at point:~ # whoami
> root
> root at point:~ # rm -rf /
> rm: "/" may not be removed
> Somebody is really clever in this World ;-) Well, FreeBSD folks made my day
> (again!). Note, that that I did on my live workstation (yes, I did test it
> on throw-away system first ;-) - so I can copy and paste what I got to this
> email.

GNU coreutils also has that feature, you can't run 'rm -rf /' there
either, you need to run it with --no-preserve-root.  This was added to
Coreutils in 2003.  Be careful in FreeBSD, if you have POSIXLY_CORRECT
defined, it will let you rm -rf /.

Jonathan Billings <billings at negate.org>