topic Re: superuser privilege in Operating System - HP-UX

superuser privilege

GDSZSAIGE — Mon, 20 Aug 2001 07:55:32 GMT

Hi experts:
how can I assign superuser (root) privilege
to a common user?
Thanks.

Re: superuser privilege

vtpaulson — Mon, 20 Aug 2001 07:58:42 GMT

Hi,

Use sudo or scmd.....

Its easy to configure....

Paulson

Re: superuser privilege

GDSZSAIGE — Mon, 20 Aug 2001 08:12:23 GMT

Hi Paulson,

Thanks for reply, but I can't find sudo or scmd, Any idea?

James

Re: superuser privilege

Michael Tully — Mon, 20 Aug 2001 08:17:36 GMT

Hi,

Have a look at the following link for 'sudo'. As suggested it is very easy to compile.

http://www.courtesan.com/sudo/index.html

Only other options are
1. Give out the root passwd (not a good idea)
2. Have that user id as uid 0 the same as root. (also bad idea)

HTH
-Michael

Re: superuser privilege

Tim D Fulford — Mon, 20 Aug 2001 08:33:15 GMT

Hi

If you do not want to compile, try to get sudo from

http://hpux.connect.org.uk/

(select your country)

Tim

Re: superuser privilege

Victor BERRIDGE — Mon, 20 Aug 2001 08:33:47 GMT

Hi,
You can also download a binary version from your preferred HP Soft Porting and Archive center such as:
http://hpux.csc.liv.ac.uk/

But my concern would be - what for?
depending on your answer, a restricted sam may do just what you want!

Good luck

All the best
Victor

Re: superuser privilege

Duenschede — Mon, 20 Aug 2001 10:10:12 GMT

Hi,

1. If You plan to use a 2nd root (ID 0) I?d recommand, that You at least force the personal identification on Your system of who is using this account. This means, look the direct remote login as root. You can easely realize this while crating the file /etc/securetty (rights 400) that only contains the word "console". The effect is, that root can only log in directly (without using su) from the console.

2. Perhaps it may be enough, that the user is member of some other groups - for example "sys" to have permission running "dmesg" or to put his logname into /etc/shutdown.allow for allowing him to shut the system for maintenance.

3. Did You think about the Set-user-ID bit ? See command chmod and ls.

Hope, that helps a little.

Regards,
Peter from Heidelberg