Operating System - HP-UX
1833883 Members
2115 Online
110063 Solutions
New Discussion

Is it possible to restrict root access on any directoy??

 
Fenny_1
Super Advisor

Is it possible to restrict root access on any directoy??

Hi all,
I have few FS which are made for Oracle user and i want to restrict root(super user)access on these Fs's.
IS it possible to restrict root user. Please help me its urgent.
Thanks in advance
6 REPLIES 6
Ninad_1
Honored Contributor

Re: Is it possible to restrict root access on any directoy??

Root user is a super user and cannot be restricted access to any directory as you have mentioned. Root would be able to access these directories.

Regards,
Ninad
Bill Hassell
Honored Contributor

Re: Is it possible to restrict root access on any directoy??

AS mentioned, root has (and must) access to every directory, file and resource in the system. It sounds like you have inexperienced users with the root password. That must be changed immediately by downloading sudo, then not allowing anyone to login as root. By using sudo, each user can get a limited set of privileges, all of which are tracked and recorded in the sudo logs.


Bill Hassell, sysadmin
Torsten.
Acclaimed Contributor

Re: Is it possible to restrict root access on any directoy??

root can do everything (also bad things) ...

Hope this helps!
Regards
Torsten.

__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________
No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!   
Dennis Handly
Acclaimed Contributor

Re: Is it possible to restrict root access on any directoy??

Only if the directory is over NFS. There the default root access is the user "nobody".
Fenny_1
Super Advisor

Re: Is it possible to restrict root access on any directoy??

Thanks for everyone's quick response.
Can you please tell me what sudo is A BRIEF DESCRIPTION and from where do i get that for HPUX 11.11
Dennis Handly
Acclaimed Contributor

Re: Is it possible to restrict root access on any directoy??

>Can you please tell me what sudo is

sudo is a command that lets ordinary users become root for one command.

As Bill says, you can configure which users and which commands. And when sudo is executed, the command is logged.

Here is one thread that tells you where to get it.
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1110525