minimize use of root account
Christian Weisgerber
naddy at mips.inka.de
Fri Feb 19 22:20:08 UTC 2016
On 2016-02-19, "Ardie H. Hwang" <iam at ardiefox.me> wrote:
> Adding a normal user to `operator` group allows the user to use `shutdown(1) command. `reboot(1)` is only for root, but it can be substituted with `shutdown -r now`.
Note that group operator also grants read access to disk devices.
(The idea is that such users can run backups with dump(8).)
This effectively means read access to any and all files on those
disks, regardless of the filesystem permissions.
--
Christian "naddy" Weisgerber naddy at mips.inka.de
More information about the freebsd-questions
mailing list