From owner-freebsd-questions Mon Jul 19 12: 0:15 1999 Delivered-To: freebsd-questions@freebsd.org Received: from mobil.surnet.ru (mobil.surnet.ru [195.54.2.7]) by hub.freebsd.org (Postfix) with ESMTP id DE28C15221 for ; Mon, 19 Jul 1999 12:00:05 -0700 (PDT) (envelope-from ilia@cgilh.chel.su) Received: (from uucgilh@localhost) by mobil.surnet.ru (8.9.1a/8.9.1) with UUCP id AAA14188; Tue, 20 Jul 1999 00:53:58 +0600 (UDT) Received: (from uucp@localhost) by cgilh.chel.su (8.8.7/8.8.7) with UUCP id AAA01213; Tue, 20 Jul 1999 00:22:03 +0600 Received: from localhost (ilia@localhost) by localhost.cgu.chel.su (8.9.2/8.9.2) with ESMTP id AAA01053; Tue, 20 Jul 1999 00:18:17 +0600 (ESS) (envelope-from ilia@cgilh.chel.su) X-Authentication-Warning: localhost.cgu.chel.su: ilia owned process doing -bs Date: Tue, 20 Jul 1999 00:18:17 +0600 (ESS) From: Ilia Chipitsine X-Sender: ilia@localhost.cgu.chel.su To: "T. William Wells" Cc: freebsd-questions@FreeBSD.ORG Subject: Re: how to watch the root user? In-Reply-To: <7muo54$reg$1@twwells.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 19 Jul 1999, T. William Wells wrote: > In article , > Vincent Poy wrote: > : Ah, sudo or super. But would they need to login as themself then > : need another password sort of like su before they get the privileges or is > : there a way so they can default login and it has only those commands? > > There are such things as "restricted shells", which are supposed > to provide a restricted set of commands and functionality but the > security on those has always been questionable. There may actually > be such a beast which is actually secure but I would not bet money > on it. However, it would be easy enough to whip up a little perl > "shell" to run a set of commands and there may be some menuing > systems that will work for this but you'd have to go looking.... sudo is also supposed to provide a restricted set of commands. what is the difference between those shells and sudo ?! security of sudo is more than questionable as well :-) it's answerable :-))) (forgive me, i'm studying english) > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message