Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Jul 1999 13:00:15 -0400 (EDT)
From:      William Melanson <wjm@gate.net>
To:        Vincent Poy <vince@venus.GAIANET.NET>
Cc:        "T. William Wells" <bill@twwells.com>, freebsd-questions@FreeBSD.ORG
Subject:   Re: how to watch the root user?
Message-ID:  <Pine.A41.4.03.9907191243430.2188-100000@tiwa.gate.net>
In-Reply-To: <Pine.BSF.4.05.9907182311140.331-100000@venus.GAIANET.NET>

next in thread | previous in thread | raw e-mail | index | archive | help

% 	Speaking about root or limited root, does anyone happen to know
% how to give like a account with limited root priviliges such as add/delete
% users and changing a users password via a shell that calls up a shell
% script but without full access as root.
% 
% 

Operator Shell

The Operator Shell (Osh) is a setuid root, security enhanced, 
restricted shell. It allows the administrator to carefully limit 
the access of special commands and files to the users whose 
duties require their use, while at the same time automatically 
maintaining audit records. The configuration file for Osh 
contains an administrator defined access profile for each 
authorized user or group. This profile lists the commands which 
may be run and specific access rights for files and directories. 
In addition to this fine grain distribution of privilege, all 
typed commands are logged along with a notation of their success 
or failure, offering a comprehensive audit log. 

Version
1.5 

Release date
June 15, 1995 

URL
http://www.c3.lanl.gov/~mcn/osh.html 
ftp://ftp.c3.lanl.gov/pub/mcn/ 

- Bill




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.A41.4.03.9907191243430.2188-100000>