How Can Give a normal user read access to /tcb/files/auth/r/* ?

[Mr.Right]

Hi,

I am facing a issue.

I am having HP-UX serevrs with me 11.11

I need to give one of my normal user access to /tcb/files/auth/r/.

So he can run only this command from his shell:-

1. ls -lrt /tcb/files/auth/r

2. cat /tcb/files/auth/r/*

Read access to all the files under /tcb/files/auth/r/*

Need help urgent.

[Patrick Wallek]

Why on earth do you need to do that?

That completely goes against the reason for using a trusted system.

[OldSchool]

since I no longer have a trusted system to look at I will only note that you give him sufficient access via chmod, it certainly won't be limited to just those commands.

installing and configuring "sudo" would allow him to access to the commands, but wouldn't (as I recall) restrict it to just that directory / those files.

[Mr.Right]

I have sudoers installed in my system..

what is need to do on sudoers file to give the user the required access.

[Tim Nelson]

I will have to second Patrick's comment and accept the zero point slap as well.

Why would you give anyone access to read the encrypted password entries for root and/or any other userid that starts with an "r" ?

Maybe explain why, because what you are asking for circumvents security.

[Dennis Handly]

>what is need to do on sudoers file to give the user the required access.

Your sudo thread is:
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1295555

[Steven E. Protter]

Shalom,

Do not pass go.

Do not collect $200

Never, ever for any reason change permissions on the files in /tcb/files

There is no good reason for it.

Better to use tsconvert to make the system not trusted than do this.

If you do this your system will fail SOX, security audits and it won't be very good for you either.

SEP