From owner-freebsd-questions  Mon Jul 19 11: 0:53 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from mobil.surnet.ru (mobil.surnet.ru [195.54.2.7])
	by hub.freebsd.org (Postfix) with ESMTP id 6FC5B152AA
	for <freebsd-questions@FreeBSD.ORG>; Mon, 19 Jul 1999 11:00:44 -0700 (PDT)
	(envelope-from ilia@cgilh.chel.su)
Received: (from uucgilh@localhost)
	by mobil.surnet.ru (8.9.1a/8.9.1) with UUCP id XAA12943;
	Mon, 19 Jul 1999 23:54:01 +0600 (UDT)
Received: (from uucp@localhost)
	by cgilh.chel.su (8.8.7/8.8.7) with UUCP id XAA01126;
	Mon, 19 Jul 1999 23:24:32 +0600
Received: from localhost (ilia@localhost)
	by localhost.cgu.chel.su (8.9.2/8.9.2) with ESMTP id WAA01102;
	Mon, 19 Jul 1999 22:39:35 +0600 (ESS)
	(envelope-from ilia@cgilh.chel.su)
X-Authentication-Warning: localhost.cgu.chel.su: ilia owned process doing -bs
Date: Mon, 19 Jul 1999 22:39:34 +0600 (ESS)
From: Ilia Chipitsine <ilia@cgilh.chel.su>
X-Sender: ilia@localhost.cgu.chel.su
To: Vincent Poy <vince@venus.GAIANET.NET>
Cc: "T. William Wells" <bill@twwells.com>,
	freebsd-questions@FreeBSD.ORG
Subject: Re: how to watch the root user?
In-Reply-To: <Pine.BSF.4.05.9907182311140.331-100000@venus.GAIANET.NET>
Message-ID: <Pine.BSF.4.05.9907192236090.1068-100000@localhost.cgu.chel.su>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=koi8-r
Content-Transfer-Encoding: 8BIT
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


look at the sudo program, it's in the ports collection.
it has a configuration, which describes which user is allowed 
to do tasks as a root.

but, once you gave somebody all the root's rights, it's not possible to
watch what he/she did. 

do not allow 'sudo' for 

1. cp 
2. rm
3. dd
4. passwd
5. ? 

it's not safe at all.

Regards, (Наилучшие пожелания)

 Ilia Chipitsine (Илья Шипицин)

On Sun, 18 Jul 1999, Vincent Poy wrote:

> 	Speaking about root or limited root, does anyone happen to know
> how to give like a account with limited root priviliges such as add/delete
> users and changing a users password via a shell that calls up a shell
> script but without full access as root.
> 
> 
> Cheers,
> Vince - vince@MCESTATE.COM - vince@GAIANET.NET           ________   __ ____ 
> Unix Networking Operations - FreeBSD-Real Unix for Free / / / / |  / |[__  ]
> GaiaNet Corporation - M & C Estate                     / / / /  | /  | __] ]  
> Beverly Hills, California USA 90210                   / / / / / |/ / | __] ]
> HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____]
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message