read-only root account? NFS? Shell?

[A. Daniel King_1]

Is there a way to allow read access to an entire system (HP-UX 11.0), without write access?

Perhaps a NFS option with read-only mount? I've tried this with some success - but I've got to allow root on another machine. Is there a same-machine option?

Perhaps Power Broker? This is a cost item which I've not tried.

[S.K. Chan]

Not sure if this is what you're looking for but I'll give it a shot ..
2 machines (mars and venus) and you want to allow users that logs in to venus to have read only access to entire mounted FS of mars onto venus.

On mars
=======
# vi /etc/exports
/ -anon=65534,ro,access=venus
# /etc/exportfs -a

On venus
========
# mkdir /test
# mount mars:/ /test

Test it. Having given you this suggestion, I still think exporting "/" is not a good idea.

[Sridhar Bhaskarla · Accepted solution]

Daniel,

NFS is not a bad thing to try. There is one nice software that can do this kind of job is

Before it was called SEOS by platinum. I guess it is eTrust by Computer Associates now.

-Sri

[A. Daniel King_1]

I don't like exporting / either, and nfs is easily exploitable in many ways. Are there any shells which allow read-only access?

[Jeff Schussele]

Hi Daniel,

the rsh (restricted shell) gives that capability - or lack thereof I guess you could say...
This shell confuses lots of non-HP SAs as rsh is the remote shell command in every other UNIX OS whereas that's remsh in HP-UX.

Rgds,
Jeff

[A. Daniel King_1]

rsh allows rm.