From owner-freebsd-questions@FreeBSD.ORG  Tue Sep  4 14:55:18 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 21C3D16A46B
	for <freebsd-questions@freebsd.org>;
	Tue,  4 Sep 2007 14:55:18 +0000 (UTC)
	(envelope-from wmoran@potentialtech.com)
Received: from mail.potentialtech.com (internet.potentialtech.com
	[66.167.251.6])
	by mx1.freebsd.org (Postfix) with ESMTP id E670F13C47E
	for <freebsd-questions@freebsd.org>;
	Tue,  4 Sep 2007 14:55:17 +0000 (UTC)
	(envelope-from wmoran@potentialtech.com)
Received: from vanquish.pitbpa0.priv.collaborativefusion.com
	(pr40.pitbpa0.pub.collaborativefusion.com [206.210.89.202])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.potentialtech.com (Postfix) with ESMTP id 03BB4EBC78;
	Tue,  4 Sep 2007 10:55:16 -0400 (EDT)
Date: Tue, 4 Sep 2007 10:55:15 -0400
From: Bill Moran <wmoran@potentialtech.com>
To: Juri Mianovich <juri_mian@yahoo.com>
Message-Id: <20070904105515.05e0d875.wmoran@potentialtech.com>
In-Reply-To: <521035.63933.qm@web45613.mail.sp1.yahoo.com>
References: <521035.63933.qm@web45613.mail.sp1.yahoo.com>
X-Mailer: Sylpheed 2.4.4 (GTK+ 2.10.14; i386-portbld-freebsd6.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: allowing non-root to "ipfw show" ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Sep 2007 14:55:18 -0000

In response to Juri Mianovich <juri_mian@yahoo.com>:

> Is there any way to allow a non-root user the ability
> to view firewall rules with:
> 
> ipfw show
> 
> I would really like to allow some non-root users to
> see certain "count" rules I have in place, but they
> don't seem to be allowed to run 'ipfw' in any
> capacity.
> 
> Suggestions ?

sudo will give you this fine-grained control.  It's in ports.

-- 
Bill Moran
http://www.potentialtech.com