Date: Sat, 28 Apr 2012 12:21:17 +0200 From: Lars Engels <lars.engels@0x20.net> To: "Patrick M. Hausen" <hausen@punkt.de> Cc: Zenny <garbytrash@gmail.com>, "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org>, Eugene Grosbein <egrosbein@rdtc.ru> Subject: Re: Restricting users from certain privileges Message-ID: <20120428102117.GX37811@e-new.0x20.net> In-Reply-To: <0F37A1B9-993B-4A4E-9FCC-8B19AADCFB72@punkt.de> References: <CACuV5sCyCgn8aBawTEP=BT%2B%2B4Ut4kPt8fXSq%2BgcS2YrkZaU%2BJw@mail.gmail.com> <E1SO2ER-000K66-8k@kabab.cs.huji.ac.il> <CACuV5sCHmnUnXTTY%2BkGqszi-Ynu8Vr3bf%2BLALf=yQbhHPXSdXA@mail.gmail.com> <4F9BBABA.6040708@rdtc.ru> <0F37A1B9-993B-4A4E-9FCC-8B19AADCFB72@punkt.de>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Sat, Apr 28, 2012 at 11:47:07AM +0200, Patrick M. Hausen wrote: > Hi, all, > > Am 28.04.2012 um 11:39 schrieb Eugene Grosbein: > > > 28.04.2012 14:50, Zenny ??????????: > > > >>> try sudo from ports, security/sudo > >>> > >>> cheers, > >>> danny > >>> > >>> > >> Thanks Daniel, but sudo gives all (not selective) root privileges to the > >> user (admin in my case). So this is not what I am trying to achieve in my > >> original post. > > > > Please do study sudo real power :-) > > It can give selective privileges per-command, > > an d it can also allow one to run some command with some arguments only > > and not with others. Or, without any arguments only - as you tune > > its sudoers configuration file. > > > Just make sure none of the permitted commands has got the > feature of starting a shell ;-)) Right, think of vi(1), less(1), et al. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAk+bxJ0ACgkQKc512sD3afgVeACgmequsCJhr1A9xPD+S+iLU7sU Ll0AniSKZ+b5QDQ79p0KUlkWPoKV94g5 =e4YX -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120428102117.GX37811>