Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 May 2006 13:32:11 +0100
From:      Alex Zbyslaw <xfb52@dial.pipex.com>
To:        Aitor San Juan <asanjuan@bolsabilbao.es>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Restrict access to custom shell scripts
Message-ID:  <447AE9CB.1070606@dial.pipex.com>
In-Reply-To: <6FA4E8E8A0FAD64F9AF5A1F0FDB8C6EE1211@BB06.bolsabilbao.local>
References:  <6FA4E8E8A0FAD64F9AF5A1F0FDB8C6EE1211@BB06.bolsabilbao.local>

next in thread | previous in thread | raw e-mail | index | archive | help
Aitor San Juan wrote:

>Hi list!
>
>I have developped several Bourne shell scripts that help some users
>to accomplish general tasks by choosing an option from a list of options.
>Such options include, for example, displaying the size of filesystems,
>(un)mounting filesystems, user account management (add/remove/lock users, etc).
>As you can imagine, many of these options will require the user to have
>superuser authorisations.
>
>It would be desirable that only a few users have the permission to execute
>these shell scripts. Following are my 2 approaches. I don't know which is
>the best. In addition, but I need some further help details of how to
>accomplish it, so any hint or suggestion would be highly appreciated.
>  
>
sudo.  It's in the ports.  You could fix your shell script permissions 
to be r-x root-only, but any operations requiring root access will just 
not work if a regular user runs it, so value is limited.

--Alex





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?447AE9CB.1070606>