From owner-freebsd-questions Thu Feb 1 1:52:47 2001 Delivered-To: freebsd-questions@freebsd.org Received: from srcso.globis.ru (globis.ru [212.248.80.7]) by hub.freebsd.org (Postfix) with ESMTP id 2E3B837B4EC for ; Thu, 1 Feb 2001 01:52:26 -0800 (PST) Received: from raduga.dyndns.org (raduga.sochi.net [212.248.82.76]) by srcso.globis.ru (8.9.3/8.9.3) with ESMTP id NAA99581 for ; Thu, 1 Feb 2001 13:26:12 +0300 (MSK) (envelope-from igor@raduga.dyndns.org) Received: (from igor@localhost) by raduga.dyndns.org (8.10.1/8.10.1) id f119oi630747 for freebsd-questions@FreeBSD.ORG; Thu, 1 Feb 2001 12:50:44 +0300 Date: Thu, 1 Feb 2001 12:50:44 +0300 From: Igor Robul To: freebsd-questions@FreeBSD.ORG Subject: Re: About delegating account creation Message-ID: <20010201125044.A30521@linux.rainbow> Reply-To: igorr@crosswinds.net Mail-Followup-To: freebsd-questions@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre4i In-Reply-To: ; from mj@isy.liu.se on Thu, Feb 01, 2001 at 10:25:56AM +0100 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Feb 01, 2001 at 10:25:56AM +0100, Micke Josefsson wrote: > I am root on a server. And as such I can create new accounts. Now if am away can > I delegate account creation to someone else without also giving him/her the > means of creating havoc with the system? /usr/ports/sysutils/webmin You can create account which will only can manage users, BUT if some user can edit password files, then it easy can become root. -- Igor Robul, Unix System Administrator & Programmer @ sanatorium "Raduga", Sochi, Russia http://www.brainbench.com/transcript.jsp?pid=304744 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message