minimize use of root account

Christian Weisgerber naddy at mips.inka.de
Fri Feb 19 22:20:08 UTC 2016


On 2016-02-19, "Ardie H. Hwang" <iam at ardiefox.me> wrote:

> Adding a normal user to `operator` group allows the user to use `shutdown(1) command. `reboot(1)` is only for root, but it can be substituted with `shutdown -r now`.

Note that group operator also grants read access to disk devices.
(The idea is that such users can run backups with dump(8).)
This effectively means read access to any and all files on those
disks, regardless of the filesystem permissions.

-- 
Christian "naddy" Weisgerber                          naddy at mips.inka.de


More information about the freebsd-questions mailing list