topic Re: diff between non root users and root users in Operating System - HP-UX

diff between non root users and root users

madhudeepan — Tue, 01 Sep 2009 18:25:32 GMT

bdf ,, glance , top commands are executed by both root and non root users , but some administrative commands are not able to run by non root users..

i need to give permission for the non root users to execute printers related command alone and for other administrative commands non root user should not have permission ,,
how can i do it..

this is for my knowledge base

Re: diff between non root users and root users

Tingli — Tue, 01 Sep 2009 18:30:35 GMT

You can use sudo to do it. For more info, you can check man sudo, man sudoers, man visudo.

Re: diff between non root users and root users

Pete Randall — Tue, 01 Sep 2009 18:34:22 GMT

Or give them access to restricted SAM (sam -r).

Pete

Re: diff between non root users and root users

Hakki Aydin Ucar — Tue, 01 Sep 2009 19:11:08 GMT

I would prefer to use restricted SAM (sam -r).
Also , role-based access control (RBAC) can be useful.

Re: diff between non root users and root users

Emil Velez — Tue, 01 Sep 2009 23:45:32 GMT

sam -r is gone at 11.31 so

Role based access control is probably the best solution

look up roleadm

Re: diff between non root users and root users

Yogesh M Puranik — Wed, 02 Sep 2009 03:52:30 GMT

Hakki and Emil,

R u sure role-based access control (RBAC) is part of HP-UX?I hope this utility is used in Solaris.

Madhudeepan,

Regarding Giving access to perticular commands you can either use SAM -r, but i would prefer,sudo utility only.Because logs are not generated with SAM as this is TUI (Terminal User Interface).

In sudo utility,the commands whichever run by root privillaged user can be tracked.

Rgds
Yogesh

Re: diff between non root users and root users

Dennis Handly — Wed, 02 Sep 2009 04:10:25 GMT

>Yogesh: Are you sure role-based access control (RBAC) is part of HP-UX?

Very sure, for free:
http://docs.hp.com/en/5991-4853/index.html
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=SecurityExt
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1215907
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1206541
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1204720