Date: Mon, 19 Jul 1999 22:39:34 +0600 (ESS) From: Ilia Chipitsine <ilia@cgilh.chel.su> To: Vincent Poy <vince@venus.GAIANET.NET> Cc: "T. William Wells" <bill@twwells.com>, freebsd-questions@FreeBSD.ORG Subject: Re: how to watch the root user? Message-ID: <Pine.BSF.4.05.9907192236090.1068-100000@localhost.cgu.chel.su> In-Reply-To: <Pine.BSF.4.05.9907182311140.331-100000@venus.GAIANET.NET>
next in thread | previous in thread | raw e-mail | index | archive | help
look at the sudo program, it's in the ports collection. it has a configuration, which describes which user is allowed to do tasks as a root. but, once you gave somebody all the root's rights, it's not possible to watch what he/she did. do not allow 'sudo' for 1. cp 2. rm 3. dd 4. passwd 5. ? it's not safe at all. Regards, (Наилучшие пожелания) Ilia Chipitsine (Илья Шипицин) On Sun, 18 Jul 1999, Vincent Poy wrote: > Speaking about root or limited root, does anyone happen to know > how to give like a account with limited root priviliges such as add/delete > users and changing a users password via a shell that calls up a shell > script but without full access as root. > > > Cheers, > Vince - vince@MCESTATE.COM - vince@GAIANET.NET ________ __ ____ > Unix Networking Operations - FreeBSD-Real Unix for Free / / / / | / |[__ ] > GaiaNet Corporation - M & C Estate / / / / | / | __] ] > Beverly Hills, California USA 90210 / / / / / |/ / | __] ] > HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____] > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9907192236090.1068-100000>