topic Re: Limiting root access for specific user's in Operating System - HP-UX

Limiting root access for specific user's

Brian Abdallah_2 — Thu, 24 Oct 2002 19:20:20 GMT

We have a group that request root access to our
depot machine. They populate this depot server
with patches, bundles, filesets, etc. I was looking for a way to limit their access but yet
allow them to dump stuff into the depot server.
I really don't want to just go and give them root. They suggested a separate password for
this machine, but they'd still have root.
Any suggestions?

Re: Limiting root access for specific user's

Ken Hubnik_2 — Thu, 24 Oct 2002 19:20:11 GMT

Why not create a depot group and make a directory owned my the group.

Re: Limiting root access for specific user's

steven Burgess_2 — Thu, 24 Oct 2002 19:22:29 GMT

Hi Brian

You want to take a look at sudo

Here is the url for the product

http://www.courtesan.com/sudo/intro.html

HTH

Steve

Re: Limiting root access for specific user's

John Dvorchak — Thu, 24 Oct 2002 19:22:50 GMT

Perhaps a freebie called sudo could solve the problem for you.

http://hpux.cs.utah.edu/

Then enter sudo in the Package search dialog box

Re: Limiting root access for specific user's

A. Clay Stephenson — Thu, 24 Oct 2002 19:26:28 GMT

One method would be tp put a set of their needed commands under the control of sudo.
http://gatekeep.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

Re: Limiting root access for specific user's

Khalid A. Al-Tayaran — Thu, 24 Oct 2002 19:28:36 GMT

Hi,

"BE CAREFUL". Root Access is not something to give away easily. Create a group and make a directory for depots owned by the that group.

Re: Limiting root access for specific user's

Tom Danzig — Thu, 24 Oct 2002 19:33:33 GMT

You should be able to give them restricted SAM access to the "Sofware Management" section only. This should allow them to create/modify depots, etc. via SAM and nothing else. See man sam.