From owner-freebsd-questions@FreeBSD.ORG Mon Jan 8 18:35:59 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 573DE16A407 for ; Mon, 8 Jan 2007 18:35:59 +0000 (UTC) (envelope-from chandler@chapman.edu) Received: from calais.chapman.edu (calais.chapman.edu [192.77.116.205]) by mx1.freebsd.org (Postfix) with ESMTP id 4342813C43E for ; Mon, 8 Jan 2007 18:35:59 +0000 (UTC) (envelope-from chandler@chapman.edu) Received: from [206.211.142.181] (ist181.chapman.edu [206.211.142.181]) by calais.chapman.edu (Postfix) with ESMTP id 50FBB2E73A for ; Mon, 8 Jan 2007 10:07:14 -0800 (PST) Message-ID: <45A2884F.7010405@chapman.edu> Date: Mon, 08 Jan 2007 10:07:11 -0800 From: Jay Chandler User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Chapman-MailScanner-Information: Please contact the ISP for more information X-Chapman-MailScanner: Found to be clean X-Chapman-MailScanner-From: chandler@chapman.edu X-Spam-Status: No Subject: Permissions Question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jan 2007 18:35:59 -0000 Sorry for the dumb question this morning-- caffeine hasn't yet worked its wondrous magic upon my person. I've got a user who needs to be able to view (read only) the aliases file. We'll grant him root access a few weeks after the eventual heat-death of the universe, so how would you all go about doing this? I've considered allowing him to run a local copy of the praliases command, but that chokes on the /etc/mail/aliases permissions... To complicate things, the file /etc/mail/aliases is actually an NFS mounted file shared between all our mx boxes, and he only needs to access it from a designated machine. Thoughts? My apologies if this is unclear... -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler@chapman.edu Today's Excuse: I'm sorry a pentium won't do, you need an SGI to connect with us.