Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Jun 2004 10:32:35 -0500
From:      Kirk Strauser <kirk@strauser.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: want sudo but not sudo su - how
Message-ID:  <87hdtgpzak.fsf@strauser.com>
In-Reply-To: <20040612101402.GC72289@itconsultuk.net> (lists@itconsultuk.net's message of "Sat, 12 Jun 2004 11:14:02 %2B0100")
References:  <20040612101402.GC72289@itconsultuk.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--=-=-=
Content-Transfer-Encoding: quoted-printable

At 2004-06-12T10:14:02Z, John <lists@itconsultuk.net> writes:

> Is there a way of enforcing this?

No.  For example, if you let them run vim as root, then they can open a
shell from there and run commands in it.  Either configure a list of
commands that they can use safely, or set down a clear policy and enforce
it.
=2D-=20
Kirk Strauser

"94 outdated ports on the box,
 94 outdated ports.
 Portupgrade one, an hour 'til done,
 82 outdated ports on the box."

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBAyyIT5sRg+Y0CpvERAh6cAJ9I00uEUi8UKpUcou7qH0Q4yqM6wACffnn6
H8TFDt1j7002rQXzwpaE9yU=
=nxRH
-----END PGP SIGNATURE-----
--=-=-=--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87hdtgpzak.fsf>