From owner-freebsd-questions@FreeBSD.ORG Tue May 29 02:41:25 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id B391716A51F for ; Tue, 29 May 2007 02:41:25 +0000 (UTC) (envelope-from on@cs.ait.ac.th) Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16]) by mx1.freebsd.org (Postfix) with ESMTP id 2FFA513C483 for ; Tue, 29 May 2007 02:41:24 +0000 (UTC) (envelope-from on@cs.ait.ac.th) Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5]) by mail.cs.ait.ac.th (8.13.1/8.12.11) with ESMTP id l4T2fNtc069611 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 29 May 2007 09:41:23 +0700 (ICT) Received: (from on@localhost) by banyan.cs.ait.ac.th (8.13.3/8.12.11) id l4T2fNr0007956; Tue, 29 May 2007 09:41:23 +0700 (ICT) Date: Tue, 29 May 2007 09:41:23 +0700 (ICT) Message-Id: <200705290241.l4T2fNr0007956@banyan.cs.ait.ac.th> From: Olivier Nicole To: jerrymc@msu.edu In-reply-to: <20070529015231.GB26229@gizmo.acns.msu.edu> (message from Jerry McAllister on Mon, 28 May 2007 21:52:31 -0400) References: <032601c7a149$77913cc0$6400a8c0@msdi.local> <20070529015231.GB26229@gizmo.acns.msu.edu> X-Virus-Scanned: on CSIM by amavisd-milter (http://www.amavis.org/) Cc: lordi@msdi.ca, freebsd-questions@freebsd.org Subject: Re: Su newbie question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2007 02:41:25 -0000 > But that may not be the best way. You really don't want to spread > root accounts around a lot. One alternative might be setting up > sudo to allow the specific things that this other person needs to do. > sudo woul dbe the right way to do: you have fine choice on the various priviledges you give to the various people; each sudo command is logged so you can trace back in case of problem; you use your own password to sudo so you are not tempted to give it away to another user, even temporar. Olivier