From owner-freebsd-questions@FreeBSD.ORG  Tue Jan  9 20:47:04 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id BD56216A403
	for <freebsd-questions@freebsd.org>;
	Tue,  9 Jan 2007 20:47:04 +0000 (UTC)
	(envelope-from kirk@strauser.com)
Received: from kanga.honeypot.net (kanga.honeypot.net [208.162.254.122])
	by mx1.freebsd.org (Postfix) with ESMTP id 7493A13C465
	for <freebsd-questions@freebsd.org>;
	Tue,  9 Jan 2007 20:47:04 +0000 (UTC)
	(envelope-from kirk@strauser.com)
Received: from localhost (localhost [127.0.0.1])
	by kanga.honeypot.net (Postfix) with ESMTP id 26B7E20B408
	for <freebsd-questions@freebsd.org>;
	Tue,  9 Jan 2007 14:47:03 -0600 (CST)
X-Virus-Scanned: amavisd-new at honeypot.net
Received: from kanga.honeypot.net ([127.0.0.1])
	by localhost (kanga.honeypot.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id OiD5c1rwYGJP for <freebsd-questions@freebsd.org>;
	Tue,  9 Jan 2007 14:47:00 -0600 (CST)
Received: from janus.daycos.com (janus.daycos.com [10.45.12.2])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by kanga.honeypot.net (Postfix) with ESMTP id 188D820B403
	for <freebsd-questions@freebsd.org>;
	Tue,  9 Jan 2007 14:47:00 -0600 (CST)
From: Kirk Strauser <kirk@strauser.com>
To: freebsd-questions@freebsd.org
Date: Tue, 9 Jan 2007 14:46:52 -0600
User-Agent: KMail/1.9.5
References: <20070109.110256.14368.1628204@webmail23.nyc.untd.com>
In-Reply-To: <20070109.110256.14368.1628204@webmail23.nyc.untd.com>
X-Face: T+/_{qmjgbosI0J/e83I~w[&VF'w)!(<bFJWGw=Vx16yEz`z=a^@7)qZ{yc5m;
	#Q"K(=?utf-8?q?S-T=0A=09p1?=<=?utf-8?q?rTK6XRo=3F8kwsj=26g/ze=2ETkdj=24vrJ4rE=5EspYQA3/qUgm=27Ysoy=27D!?=
	=?utf-8?q?05=7CbD*W=5D+F*OPF=25=5E0=0A=09?=>(xEpj///^bA/6?jHHS?nq+T8_+`nh"WnEWCWG,
	\}]Y2$))
	=?utf-8?q?vLVz4ACChrEcb=7DCO=5EtYmMG=5C=0A=09ts=2Em=3F=5B7=5B6OwE*dAJ*9f+m?=
	=?utf-8?q?X=2E7R32qeN=5EDJ=5C?=(k@evW?IRQCy.^
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart2021165.hS2T5Vz0c2";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200701091446.56873.kirk@strauser.com>
Subject: Re: Permissions Question & Re: Permissions advice needed
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Jan 2007 20:47:04 -0000

--nextPart2021165.hS2T5Vz0c2
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 09 January 2007 1:01 pm, gs_stoller@juno.com wrote:

> On 1/8/07, Kirk Strauser <kirk@strauser.com> wrote:

>> You could configure sudo to give him access to run that one
>> command as root.

> One has to be very careful about giving out such access!
> root has much power.

Hence "sudo", where you're giving them exactly one permission: the ability=
=20
to execute one specific read-only command.
=2D-=20
Kirk Strauser

--nextPart2021165.hS2T5Vz0c2
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iD8DBQBFo/9A5sRg+Y0CpvERAscKAJ9/fQS1/XWHMhnfk/+atxFjBMt7ngCfVX9Q
7OEqpWCubBxdzI5JALBlo+o=
=cX6y
-----END PGP SIGNATURE-----

--nextPart2021165.hS2T5Vz0c2--