Re: Restricting users from certain privileges
--htO1hhWexm+U+1ye
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sat, Apr 28, 2012 at 11:29:58AM +0200, Dimitry Andric wrote:
> On 2012-04-28 09:50, Zenny wrote:
> > On Sat, Apr 28, 2012 at 9:38 AM, Daniel Braniss <danny@cs.huji.ac.il> w=
rote:
> ...
> >> try sudo from ports, security/sudo
> > Thanks Daniel, but sudo gives all (not selective) root privileges to the
> > user (admin in my case).
>=20
> This isn't true. With sudo, you can give specific users, or groups of
> users, restricted lists of commands they can run, and even specify on
> which particular machines they can be run.
Sure, but if the allowed commands were not specifically designed to
be run with elevated privileges, you typically give the user ability
to run any command with elevated privileges.
Even specially designed commands sometimes give away much more power
then intended.
--htO1hhWexm+U+1ye
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (FreeBSD)
iEYEARECAAYFAk+bvMQACgkQC3+MBN1Mb4hWuwCfX4mbiqM8unepiC2FukO+FyUW
7J0AoO+QB5Bw2dokA9pdVXHhRIIkpupy
=7IlQ
-----END PGP SIGNATURE-----
--htO1hhWexm+U+1ye--
討論串 (同標題文章)
完整討論串 (本文為第 15 之 16 篇)：