Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Sep 2000 19:32:14 +0400
From:      Igor Roboul <igor@raduga.dyndns.org>
To:        freebsd-questions@FreeBSD.ORG
Subject:   Re: restricted su
Message-ID:  <20000911193214.C20047@linux.rainbow>
In-Reply-To: <20000911162239.A37626@tigerdyr.candid.dk>; from lyngbol@candid.dk on Mon, Sep 11, 2000 at 04:22:39PM %2B0200
References:  <20000911134613.B34974@tigerdyr.candid.dk> <39BCE5E6.365473C4@magpage.com> <20000911162239.A37626@tigerdyr.candid.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Sep 11, 2000 at 04:22:39PM +0200, Michael Lyngbøl wrote:
> Looking at /usr/src/usr.bin/su/su.c (as pointed out by Igor) - you'll
> have to hack this up ypur selv?!?
Of course, NO!
I have just anwered to your question :-) and I had not give you advice :-)
If you wish something more flexible than plain 'su' you can use 'sudo' (you 
can find it in ports) or su1 (I can't find it anywhere now, but I had source)

su1 is very easy in configuration (much easier than sudo) and allows
different groups, aliases, strict some command to only specific command line
etc.
Some examples:

define ADMIN igor
alias apachectl /usr/local/apache/bin/apachectl
allow ADMIN prefix apachectl

alias nmbd_start /usr/local/samba/bin/nmbd -D
allow SAMBA_ADMIN exact nmbd_start

etc.

-- 
Igor Roboul, Unix System Administrator & Programmer @ sanatorium "Raduga", 
Sochi, Russia
http://www.brainbench.com/transcript.jsp?pid=304744


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000911193214.C20047>