Date: Sat, 28 Apr 2012 12:21:17 +0200 From: Lars Engels <lars.engels@0x20.net> To: "Patrick M. Hausen" <hausen@punkt.de> Cc: Zenny <garbytrash@gmail.com>, "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org>, Eugene Grosbein <egrosbein@rdtc.ru> Subject: Re: Restricting users from certain privileges Message-ID: <20120428102117.GX37811@e-new.0x20.net> In-Reply-To: <0F37A1B9-993B-4A4E-9FCC-8B19AADCFB72@punkt.de> References: <CACuV5sCyCgn8aBawTEP=BT%2B%2B4Ut4kPt8fXSq%2BgcS2YrkZaU%2BJw@mail.gmail.com> <E1SO2ER-000K66-8k@kabab.cs.huji.ac.il> <CACuV5sCHmnUnXTTY%2BkGqszi-Ynu8Vr3bf%2BLALf=yQbhHPXSdXA@mail.gmail.com> <4F9BBABA.6040708@rdtc.ru> <0F37A1B9-993B-4A4E-9FCC-8B19AADCFB72@punkt.de>
next in thread | previous in thread | raw e-mail | index | archive | help
--W0/HzBmgDFoB92Bf Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Apr 28, 2012 at 11:47:07AM +0200, Patrick M. Hausen wrote: > Hi, all, >=20 > Am 28.04.2012 um 11:39 schrieb Eugene Grosbein: >=20 > > 28.04.2012 14:50, Zenny ??????????: > >=20 > >>> try sudo from ports, security/sudo > >>>=20 > >>> cheers, > >>> danny > >>>=20 > >>>=20 > >> Thanks Daniel, but sudo gives all (not selective) root privileges to t= he > >> user (admin in my case). So this is not what I am trying to achieve in= my > >> original post. > >=20 > > Please do study sudo real power :-) > > It can give selective privileges per-command, > > an d it can also allow one to run some command with some arguments only > > and not with others. Or, without any arguments only - as you tune > > its sudoers configuration file. >=20 >=20 > Just make sure none of the permitted commands has got the > feature of starting a shell ;-)) Right, think of vi(1), less(1), et al. --W0/HzBmgDFoB92Bf Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAk+bxJ0ACgkQKc512sD3afgVeACgmequsCJhr1A9xPD+S+iLU7sU Ll0AniSKZ+b5QDQ79p0KUlkWPoKV94g5 =e4YX -----END PGP SIGNATURE----- --W0/HzBmgDFoB92Bf--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120428102117.GX37811>