HP Unix privileges

[Yaboto]

Hi,

In MS Windows for example we have the users in Administrators Group who have full privilleges; Operator Group who have almost Full privilleges; Power user Group who have more privilleges than ordinary users for installing software application and printers; etc ...
In HP Unix, do we have a similar way to manage User Accounts to secure the HP Unix Systems.
In my case the Oracle DBA want to have some privilleges ( like killing processes; Restarting servers etc...) . Without giving ROOT Access to the Oracle DBA team, what else can I do to give them at least some average privilege above ordinary user privilege ?
Please Help !

Regards,
Mawuena

[F Verschuren]

the easyist way to give the oradba the extra rights is the use of sudo,

whit the sudo command you can give a user the rights to execute a specific user to execute a command as root.

how to install en how to configer just searse on sudo in the forum

[Pete Randall]

You can also look into restricted SAM access (sam -r), but sudo is probably the way to go.


Pete

[Paul Sperry]

yes either sudo
http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.9p11/


or super
http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/super-3.9.7/

would be the easiest solution

[Dennis Handly]

HP also has RBAC:
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

[VK2COT]

hello,

You did not specify which HP-UX version you use.

Other replies covered useful information
already.

I will add another one:

In HP-UX 11.31 you have fine grained
privileges. This method delegates superuser
privileges to executables and processes.

Hence, three security containment concepts in HP-UX 11.31:

a) Compartments;

b) Fine grained privileges;

c) Role-Based Access Control (RBAC).

Cheers,

VK2COT

Finally, you can even use SUDO with SUDOSH!
I did it on Solaris, HP-UX and Linux servers
for a Fortune 100 company last year.