From owner-freebsd-questions  Mon Sep 11  6:43:59 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from thing.orbitel.bg (thing.orbitel.bg [195.24.32.46])
	by hub.freebsd.org (Postfix) with SMTP id E49F837B422
	for <freebsd-questions@freebsd.org>; Mon, 11 Sep 2000 06:43:56 -0700 (PDT)
Received: (qmail 2359 invoked by uid 1001); 11 Sep 2000 13:43:52 -0000
Date: Mon, 11 Sep 2000 16:43:51 +0300
From: Stanislav Grozev <tacho@orbitel.bg>
To: =?iso-8859-1?Q?Michael_Lyngb=F8l?= <lyngbol@candid.dk>
Cc: freebsd-questions@freebsd.org
Subject: Re: restricted su
Message-ID: <20000911164351.C1816@thing.orbitel.bg>
References: <20000911134613.B34974@tigerdyr.candid.dk> <20000911155032.A18378@linux.rainbow> <20000911150720.A36643@tigerdyr.candid.dk>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="EVF5PPMfhYS0aIcm"
Content-Disposition: inline
User-Agent: Mutt/1.2i
In-Reply-To: <20000911150720.A36643@tigerdyr.candid.dk>; from lyngbol@candid.dk on Mon, Sep 11, 2000 at 03:07:21PM +0200
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


--EVF5PPMfhYS0aIcm
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 11, 2000 at 03:07:21PM +0200, Michael Lyngb=F8l wrote:
> On Mon, Sep 11, 2000 at 03:50:33PM +0400, Igor Roboul wrote:
> > >=20
> > > Is it possible to restrict 'su' to a specfic user to a specfic group?
> > >=20
> > > (just like only users in group 'wheel' may su to root)
> > This is default behavior
>=20
> I know. But I want to do the same thing for another group.

why don't you use sudo (/usr/ports/security/sudo)?
it gives you great control over who executes what as root...

-tacho

--
   [i don't follow] | [http://daemonz.org/ || tacho@daemonz.org]
   [everything should be made as simple as possible, but no simpler]
   0x44FC3339 || [02B5 798B 4BD1 97FB F8DB 72E4 DCA4 BE03 44FC 3339]

--EVF5PPMfhYS0aIcm
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE5vOGX3KS+A0T8MzkRAu8eAJ4wMoXHHrH5BC7xxOfCJ8lnpDgNLACghgiy
eZIW9MRgRPlDPr2D0d7uKu0=
=aLP+
-----END PGP SIGNATURE-----

--EVF5PPMfhYS0aIcm--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message