Limiting root access for specific user's

[Brian Abdallah_2]

We have a group that request root access to our
depot machine. They populate this depot server
with patches, bundles, filesets, etc. I was looking for a way to limit their access but yet
allow them to dump stuff into the depot server.
I really don't want to just go and give them root. They suggested a separate password for
this machine, but they'd still have root.
Any suggestions?

[Ken Hubnik_2]

Why not create a depot group and make a directory owned my the group.

[steven Burgess_2]

Hi Brian

You want to take a look at sudo

Here is the url for the product

http://www.courtesan.com/sudo/intro.html

HTH

Steve

[John Dvorchak]

Perhaps a freebie called sudo could solve the problem for you.

http://hpux.cs.utah.edu/

Then enter sudo in the Package search dialog box

[A. Clay Stephenson]

One method would be tp put a set of their needed commands under the control of sudo.
http://gatekeep.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

[Khalid A. Al-Tayaran]

Hi,

"BE CAREFUL". Root Access is not something to give away easily. Create a group and make a directory for depots owned by the that group.

[Tom Danzig]

You should be able to give them restricted SAM access to the "Sofware Management" section only. This should allow them to create/modify depots, etc. via SAM and nothing else. See man sam.