From owner-freebsd-questions@FreeBSD.ORG Tue Jul 8 15:00:54 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B796C1065673 for ; Tue, 8 Jul 2008 15:00:54 +0000 (UTC) (envelope-from kirk@strauser.com) Received: from kanga.honeypot.net (kanga.honeypot.net [IPv6:2001:470:a80a:1:2d0:b7ff:fe0e:3a4a]) by mx1.freebsd.org (Postfix) with ESMTP id 3B4028FC13 for ; Tue, 8 Jul 2008 15:00:54 +0000 (UTC) (envelope-from kirk@strauser.com) Received: from localhost (localhost [127.0.0.1]) by kanga.honeypot.net (Postfix) with ESMTP id 7CBA55DDEA6 for ; Tue, 8 Jul 2008 10:00:53 -0500 (CDT) X-Virus-Scanned: amavisd-new at honeypot.net Received: from kanga.honeypot.net ([127.0.0.1]) by localhost (kanga.honeypot.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NQqEd9afLxQY for ; Tue, 8 Jul 2008 10:00:47 -0500 (CDT) Received: from janus.daycos.com (janus.daycos.com [IPv6:2001:470:c054:1:207:e9ff:fe48:2b5e]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by kanga.honeypot.net (Postfix) with ESMTPSA id 8ACC35DDEA3 for ; Tue, 8 Jul 2008 10:00:47 -0500 (CDT) From: Kirk Strauser To: freebsd-questions@freebsd.org Date: Tue, 8 Jul 2008 10:00:39 -0500 User-Agent: KMail/1.9.9 References: <50744.217.114.136.134.1215506711.squirrel@mail.dsa.es> In-Reply-To: <50744.217.114.136.134.1215506711.squirrel@mail.dsa.es> X-Face: T+/_{qmjgbosI0J/e83I~w[&VF'w)!((xEpj///^bA/6?jHHS?nq+T8_+`nh"WnEWCWG, \}]Y2$)) =?utf-8?q?vLVz4ACChrEcb=7DCO=5EtYmMG=5C=0A=09ts=2Em=3F=5B7=5B6OwE*dAJ*9f+m?= =?utf-8?q?X=2E7R32qeN=5EDJ=5C?=(k@evW?IRQCy.^ MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart15803078.t6hN5l77bk"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200807081000.42849.kirk@strauser.com> Subject: Re: How to disable that an user execute any command X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jul 2008 15:00:54 -0000 --nextPart15803078.t6hN5l77bk Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Tuesday 08 July 2008, DSA - JCR wrote: > but I think that if he/she want to make CTRL-C to the shell task, he can > stop the task and then enter in the system and look whatever he wants > (for example, how the things are done). Use "sudo" to allow non-root users to run that script as root. If they hit= =20 ^C, they get dropped right back to their own account. > I want this because there is intelectual propierty behind this. Don't put trade secrets in shell scripts. =2D-=20 Kirk Strauser --nextPart15803078.t6hN5l77bk Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- iD8DBQBIc4Ea5sRg+Y0CpvERAmmJAJ9g7H+whKq8YzA7RKjZ0cUol0NrNgCdHMBk NRfS8Tt0EMHfXvYkNoFLGMc= =mZWy -----END PGP SIGNATURE----- --nextPart15803078.t6hN5l77bk--