How to give access to root owned files without root login?

[Gino Castoldi_2]

Hi,

HP-UX 11.0

We want to give access to a certain directory tree which has files owned by root (uid:gid)
to a user account that is not root.

We basically want someone to login as a non-root user but have access (r/w) to only one directory of files owned by root.

(We have a shadow password file setup from running bastille).

Is this possible? Can "SAM" do this?
Do we need sudo or some other method?

10 points to any good answer.
Thank you
Gino

[Pete Randall · Accepted solution]

Gino,

Use the "chgrp" or "chown" command to change the group ownership of all the files in the directory and make the user a member of the group that owns these files.


Pete

[Bruno Ganino]

Modify manually /etc/group and /etc/passwd
(create other user with same settings of root)
Bruno

[Pete Randall]

Gino,

While doing what Bruno suggests will work, it will also end up creating a root equivalent with all the power of root. Not only is this dangerous, it doesn't really match your requirement.


Pete

[Hemanth Gurunath Basrur]

Hello Gino,

Refer to the foll. docs for info.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/26-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/26-toc.html&searchterms=access%7cto%7croot%7cowned%7cfiles%7cwithout%7croot%7clogin%7cgive&queryid=20031117-110907

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/5187-2216/5187-2216_top.html&con=/hpux/onlinedocs/5187-2216/00/00/67-con.html&toc=/hpux/onlinedocs/5187-2216/00/00/67-toc.html&searchterms=access%7cto%7croot%7cowned%7cfiles%7cwithout%7croot%7clogin%7cgive&queryid=20031117-110907

Also, I do not think you can use SAM to do this. SAM is yet to support the shadow password functionality.

HTH.

Regards,
Hemanth

[Bruno Ganino]

Gino, Pete has reason !
I am confused word same with word some....
Sorry (i speak english very little)!
Bruno

[Geoff Wild]

Yes, you could use sudo: http://hpux.ee.ualberta.ca/hppd/hpux/Sysadmin/sudo-1.6.7p5/

Do they need to access the files from Unix?

If not, why not try samba with a username.map and share that directory.

Rgds...Geoff

[Keith Bevan_1]

Gino,

Regulate permissions with chmod, chown,chgrp

alternativley use sudo or upm

Keith