topic Re: Access to kill command in Operating System - HP-UX

Access to kill command

Arun Jain — Tue, 05 Feb 2008 04:03:35 GMT

Hi All,

I am facing a problem. There are certain processes (printer queues) which are to be killed regularly, for that I have to share the root password with other persons, resulting in integrity of server security.

Is there any method by which I can create a user/assign permission so that I dont have to share root password but side by side my aim is also accomplished.

or in other words that the user can use only kill command without any access to any other command.

Regards:
Arun

Re: Access to kill command

Dennis Handly — Tue, 05 Feb 2008 08:10:17 GMT

There is sudo that you can download.
HP also has RBAC that is similar. You can download it from here:
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Re: Access to kill command

sreeram n — Tue, 05 Feb 2008 09:23:14 GMT

Yes With sudo you can give permissions to a user or group to run any commands.

Re: Access to kill command

yulianto piyut — Wed, 06 Feb 2008 03:02:43 GMT

hi arun,

you can use sudo for this case. in sudoers file, you can create command alias (Cmnd_Alias), for example:

Cmnd_Alias PRINTERSU = /usr/bin/su - [the command to kill printer queues]

than grant the user that you want to allow to run the command, for example:
arun ALL=(ALL) NOPASSWD: PRINTERSU

you can download the depot file from this site "http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.9p11/"

hopes can solve your case.

-yut-

Re: Access to kill command

guna81_m — Wed, 06 Feb 2008 06:12:05 GMT

hi

it is possible by starting SAM administration tool in restricted mode

# sam -r

by using this u can give permision to

particular user to get administrative privileges.

thanking u
M.Gunasekaran.