restricting users privileges and logging their activities Post: 302110894

Login or Register to Ask a Question and Join Our Community

Sponsored Content

Operating Systems Solaris restricting users privileges and logging their activities Post 302110894 by sh_ksa on Friday 16th of March 2007 06:38:15 AM

Old

03-16-2007

Registered User

restricting users privileges and logging their activities

Hello,
I'm administrating new installed cluster that runs Legato Networker and Oracle 9. And I want to restrict the use of root to my self and givr the application and DBA the proper and needed privileges to do their duties without hassle in addition I would like to log users activities.

my questions are:
1. is normal user will give the oracle dba and legato networker enough privileges to run the application specific command?

2. which is better in all terms sudo or RBAC?
3. do I have to enable BSM to log the users activities if I used RBAC or I can syslog do that?

Thank you

sh_ksa

View Public Profile for sh_ksa

Find all posts by sh_ksa

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Tracking activities of Users using a particular login.

Hi!! Experts, I have a typical scenario here in which several users have access to a particular login .. say "build". None of the users know the passwd for this login. The name of some of the user have been to .rhosts file. The users can connect only by doing a rlogin to this id and then...

2. UNIX for Dummies Questions & Answers

logging users activity

Hello All! Does anyone know of a nice way to log commands in solaris 8. What I need is a program or script that saves any command that a user does in solaris command prompt. So when Steven logs in on a system, it should record everything he does, from an ls to exit with timestamps. I've been...

3. Linux

Users with login privileges

Hi. I need the name for one command which I cant remember. This command displays all users which can log in to the system, wether they are stored in /etc/passwd, NIS og LDAP. Does anyone remember what command this is?

4. AIX

Logging off users

What is the best way to logoff users from my Unix system? I have done a search and found that you can do a w or who - find who is on, and ps-ef | grep <user> and kill their processes. But what if you have a bunch of users and you need them off the system quickly? Killing individual processes...

5. Solaris

logging logout of users

I am looking for solutions to address my need to log to a file whenever a user logs out or session disconnects.

6. UNIX for Advanced & Expert Users

TCP Wrappers and restricting users

I'm using vsftpd which is being controlled by inetd. I have a user that I want to only be able to connect from one specific IP address on the same internal network so I can backup files on a separate system. Is this possible with TCP wrappers? I got the notion that it was because of a few...

7. Shell Programming and Scripting

Logging out users

Hi, How do force users to log off Unix through shell?

8. Shell Programming and Scripting

shell script for monitoring users activities

hi I need a shell script which runs perpetually in background and monitors different aspects of different users on different files and their usages for example say there r 3 users so i want when they log in i.e. their log in time and their file access, modify and change log of each file of a...

9. Shell Programming and Scripting

restricting users

how can i make my users to not use particular commands in the network like:wall....... pl z help me regarding this

10. Red Hat

Restricting multiple users to run only sftp server

Hello, can someone please provide steps, can I restrict a multiple users to only access only sftp on a server, to perform upload and download of files on their home directories. 1. I have updated their login shell as /sbin/nologin. anything else do I need to update. Thanks,

LEARN ABOUT OSF1

reboot

reboot(8)						      System Manager's Manual							 reboot(8)

NAME

       reboot - Restarts the machine

SYNOPSIS

       /usr/sbin/reboot [-dlnq]

DESCRIPTION

       When  the  system  is running and multiple users are logged in, use the shutdown -r command to perform a reboot operation.  If no users are
       logged in, use the reboot command.

       The reboot command normally stops all running processes, syncs the disks, logs the reboot,  and	writes	a  shutdown  entry  in	the  login
       accounting file, /var/adm/wtmp.

       The  reboot command uses the sync call to synchronize the disks, and to perform other shutdown activities such as resynchronizing the hard-
       ware time-of-day clock.	After these activities, the system reboots.  By default, the system starts and the file systems are  automatically
       checked.  If the start-up activities are successful, the system comes up in the default run-level.

       You must have root privileges to use this command.  Using the -n flag can result in file system damage.

FLAGS

       Generates  a  crash  dump  of the system before halting it.  Can be used with any of the other flags.  Does not log the reboot using syslog
       Does not sync the disks or log the reboot using syslog Performs a quick reboot without first shutting down running processes; does not  log
       the reboot using syslog

EXAMPLES

       To  enable  the	default reboot action, enter: reboot This command causes the system to stop all running processes, sync the disks, log the
       shutdown, and perform other routine shutdown and reboot activities.  To shut down the system without logging the reboot, enter:	reboot	-l
       This  command  shuts  down  the	system and performs all shutdown and reboot activities, except logging the shutdown.  To reboot the system
       abruptly, enter: reboot -q This command reboots the system abruptly without shutting down running processes.

FILES

       Specifies the command path Specifies the login accounting file Specifies the path of the syslog daemon

RELATED INFORMATION

       Commands:  fsck(8), halt(8), init(8), savecore(8) shutdown(8), syslogd(8)

       Functions:  reboot(2), sync(2), syslog(3) delim off

																	 reboot(8)