Access to kill command

[Arun Jain]

Hi All,

I am facing a problem. There are certain processes (printer queues) which are to be killed regularly, for that I have to share the root password with other persons, resulting in integrity of server security.

Is there any method by which I can create a user/assign permission so that I dont have to share root password but side by side my aim is also accomplished.

or in other words that the user can use only kill command without any access to any other command.

Regards:
Arun

[Dennis Handly]

There is sudo that you can download.
HP also has RBAC that is similar. You can download it from here:
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

[sreeram n]

Yes With sudo you can give permissions to a user or group to run any commands.

[yulianto piyut]

hi arun,

you can use sudo for this case. in sudoers file, you can create command alias (Cmnd_Alias), for example:

Cmnd_Alias PRINTERSU = /usr/bin/su - [the command to kill printer queues]

than grant the user that you want to allow to run the command, for example:
arun ALL=(ALL) NOPASSWD: PRINTERSU

you can download the depot file from this site "http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.9p11/"

hopes can solve your case.

-yut-

[guna81_m]

hi

it is possible by starting SAM administration tool in restricted mode


# sam -r

by using this u can give permision to

particular user to get administrative privileges.

thanking u
M.Gunasekaran.