From owner-freebsd-questions Tue Jul 20 11: 3:39 1999 Delivered-To: freebsd-questions@freebsd.org Received: from mobil.surnet.ru (mobil.surnet.ru [195.54.2.7]) by hub.freebsd.org (Postfix) with ESMTP id D7995153CF for ; Tue, 20 Jul 1999 11:03:27 -0700 (PDT) (envelope-from ilia@cgilh.chel.su) Received: (from uucgilh@localhost) by mobil.surnet.ru (8.9.1a/8.9.1) with UUCP id XAA04912; Tue, 20 Jul 1999 23:54:30 +0600 (UDT) Received: (from uucp@localhost) by cgilh.chel.su (8.8.7/8.8.7) with UUCP id XAA01007; Tue, 20 Jul 1999 23:41:19 +0600 Received: from localhost (ilia@localhost) by localhost.cgu.chel.su (8.9.2/8.9.2) with ESMTP id XAA00889; Tue, 20 Jul 1999 23:37:19 +0600 (ESS) (envelope-from ilia@cgilh.chel.su) X-Authentication-Warning: localhost.cgu.chel.su: ilia owned process doing -bs Date: Tue, 20 Jul 1999 23:37:19 +0600 (ESS) From: Ilia Chipitsine X-Sender: ilia@localhost.cgu.chel.su To: Vincent Poy Cc: "T. William Wells" , freebsd-questions@FreeBSD.ORG Subject: Re: how to watch the root user? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=koi8-r Content-Transfer-Encoding: 8BIT Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG oh, i've forgotten. ssh by default also allows login as root :-( make sure you switched it OFF. Regards, (Наилучшие пожелания) Ilia Chipitsine (Илья Шипицин) On Mon, 19 Jul 1999, Vincent Poy wrote: > On Mon, 19 Jul 1999, Ilia Chipitsine wrote: > > > look at the sudo program, it's in the ports collection. > > it has a configuration, which describes which user is allowed > > to do tasks as a root. > > > > but, once you gave somebody all the root's rights, it's not possible to > > watch what he/she did. > > > > do not allow 'sudo' for > > > > 1. cp > > 2. rm > > 3. dd > > 4. passwd > > 5. ? > > > > it's not safe at all. > > I think we need sudo for just finger, adduser, rmuser, passwd. > The thing is that I can write a shell script to do all the functions and > have that as a default shell but how do I call up sudo into the script. > > > Cheers, > Vince - vince@MCESTATE.COM - vince@GAIANET.NET ________ __ ____ > Unix Networking Operations - FreeBSD-Real Unix for Free / / / / | / |[__ ] > GaiaNet Corporation - M & C Estate / / / / | / | __] ] > Beverly Hills, California USA 90210 / / / / / |/ / | __] ] > HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____] > > > > On Sun, 18 Jul 1999, Vincent Poy wrote: > > > > > Speaking about root or limited root, does anyone happen to know > > > how to give like a account with limited root priviliges such as add/delete > > > users and changing a users password via a shell that calls up a shell > > > script but without full access as root. > > > > > > > > > Cheers, > > > Vince - vince@MCESTATE.COM - vince@GAIANET.NET ________ __ ____ > > > Unix Networking Operations - FreeBSD-Real Unix for Free / / / / | / |[__ ] > > > GaiaNet Corporation - M & C Estate / / / / | / | __] ] > > > Beverly Hills, California USA 90210 / / / / / |/ / | __] ] > > > HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____] > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-questions" in the body of the message > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message