Restricting users from certain privileges

Lars Engels lars.engels at 0x20.net
Sat Apr 28 10:21:20 UTC 2012


On Sat, Apr 28, 2012 at 11:47:07AM +0200, Patrick M. Hausen wrote:
> Hi, all,
> 
> Am 28.04.2012 um 11:39 schrieb Eugene Grosbein:
> 
> > 28.04.2012 14:50, Zenny ??????????:
> > 
> >>> try sudo from ports, security/sudo
> >>> 
> >>> cheers,
> >>>       danny
> >>> 
> >>> 
> >> Thanks Daniel, but sudo gives all (not selective) root privileges to the
> >> user (admin in my case). So this is not what I am trying to achieve in my
> >> original post.
> > 
> > Please do study sudo real power :-)
> > It can give selective privileges per-command,
> > an d it can also allow one to run some command with some arguments only
> > and not with others. Or, without any arguments only - as you tune
> > its sudoers configuration file.
> 
> 
> Just make sure none of the permitted commands has got the
> feature of starting a shell ;-))

Right, think of vi(1), less(1), et al.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20120428/53535c4f/attachment.pgp


More information about the freebsd-stable mailing list