Restrict access to custom shell scripts

Alex Zbyslaw xfb52 at dial.pipex.com
Mon May 29 05:32:30 PDT 2006


Aitor San Juan wrote:

>Hi list!
>
>I have developped several Bourne shell scripts that help some users
>to accomplish general tasks by choosing an option from a list of options.
>Such options include, for example, displaying the size of filesystems,
>(un)mounting filesystems, user account management (add/remove/lock users, etc).
>As you can imagine, many of these options will require the user to have
>superuser authorisations.
>
>It would be desirable that only a few users have the permission to execute
>these shell scripts. Following are my 2 approaches. I don't know which is
>the best. In addition, but I need some further help details of how to
>accomplish it, so any hint or suggestion would be highly appreciated.
>  
>
sudo.  It's in the ports.  You could fix your shell script permissions 
to be r-x root-only, but any operations requiring root access will just 
not work if a regular user runs it, so value is limited.

--Alex




More information about the freebsd-questions mailing list