security problem with "sudo" for shutdown? | Unix Linux Forums | UNIX for Dummies Questions & Answers

  Go Back    


UNIX for Dummies Questions & Answers If you're not sure where to post a UNIX or Linux question, post it here. All UNIX and Linux newbies welcome !!

security problem with "sudo" for shutdown?

UNIX for Dummies Questions & Answers


Tags
security risk, shutdown, sudo

Closed Thread    
 
Thread Tools Search this Thread Display Modes
    #1  
Old 10-12-2012
kg6iia kg6iia is offline
Registered User
 
Join Date: Oct 2012
Last Activity: 12 October 2012, 3:40 PM EDT
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
security problem with "sudo" for shutdown?

I am a UNIX user but not an admin. I am asking our admins to create a "sudo" command to allow shutting down our AIX workstations gracefully (without just pulling the plug).
Is there a way to prevent the user from executing "shutdown" on another workstation or server on the network?
Sponsored Links
    #2  
Old 10-12-2012
jim mcnamara jim mcnamara is offline Forum Staff  
...@...
 
Join Date: Feb 2004
Last Activity: 2 September 2014, 4:09 PM EDT
Location: NM
Posts: 10,188
Thanks: 275
Thanked 785 Times in 734 Posts
If they grant permissions to you only when you are trying to run a shutdown script, things are safe. They write the shutdown script, it checks what it is shutting down before it takes action.

They protect the script from change. sudo has fairly fine-grained controls on it. An admin could grant run only to certain users on the script. Mid-level management in one department for example.

Is this what you are asking?
Sponsored Links
    #3  
Old 10-12-2012
vbe's Avatar
vbe vbe is offline Forum Staff  
Moderator
 
Join Date: Sep 2005
Last Activity: 2 September 2014, 1:19 PM EDT
Location: Switzerland - GE
Posts: 5,651
Thanks: 152
Thanked 391 Times in 370 Posts
Yes it could be by granting locally the use of shutdown command, I am sure it could also be done in smit/smitty... (using RBAC...)
Sponsored Links
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
awk command to replace ";" with "|" and ""|" at diferent places in line of file shis100 Shell Programming and Scripting 7 03-16-2011 08:59 AM
Unable to use the Sudo command. "0509-130 Symbol resolution failed for sudo because:" Chloe123 UNIX for Dummies Questions & Answers 1 12-21-2009 04:09 PM
Difference between "shutdown" and "shutdown -h" ? vilius AIX 1 12-10-2008 02:53 AM
A question/problem about oracle "tns listener" and "enterprise manager" talipk UNIX for Advanced & Expert Users 1 12-03-2008 06:55 AM
A question/problem about oracle "tns listener" and "enterprise manager" talipk UNIX and Linux Applications 0 12-01-2008 02:08 PM



All times are GMT -4. The time now is 03:02 AM.