RBAC - Solution

[Joao Rei]

Hi,

I'm trying to find a solution for the following requirement.

- The User needs to execute all root commands except change the password.

Does anyone have an ideia how to deal with command negations in RBAC?

Regards,

Joao Rei

[Hakki Aydin Ucar]

I am not user RBAC will be able to restrict only one command while all commands will be unrestricted to this user.
http://h71028.www7.hp.com/hpux11i/downloads/hpux11i_rbac.pdf

Maybe you can try sudo OR restricted users with SAM ;
# sam â r

[Joao Rei]

Thank you for your answer.

I've already have sudo running. But now I'm migrating to RBAC.
Under sudo I can restrict commands.

If I assign the Admin role to a user he can do anything, but I want to restric some commands.

Regards,

Joao Rei