Sponsored Content
Full Discussion: sudo & Sox compliance
Top Forums UNIX for Advanced & Expert Users sudo & Sox compliance Post 302117808 by rwallaceisg on Wednesday 16th of May 2007 11:37:59 AM
Old 05-16-2007
Question sudo & Sox compliance

Hello,

I am trying to convince my boss to stop allowing our users to login as root (superuser). Currently our users login to our unix server with their own account, then as needed, they will do an su and put in the root password.

This scares me, for a bunch of reasons. Mainly, one is that we still use telnet, not ssh, which I am also trying to enforce as well. Secondly, some of our users who have root access, have little to no unix knowledge, whatsoever. This can be very dangerous...

What I proposed to my boss is, that we do not give out the root password anymore. Instead, using sudo, give users access to certain commands/scripts. Then they can simply do 'sudo command' ... And then none of them ever have to type in the root password, and everything they do as su, is logged in the sudoers.log file..

My boss wants to know how sudo fits in with SOX , if it is compliant with SOX, if SOX has any restrictions with using sudo, etc.

Also , we need to know how sudo complies with HIPPA. As we are soon to become HIPPA compliant. Which brings me to telnet, which I fear, is not HIPPA, compliant, in that it has no security , and data can be captured with relative ease...

Any information would be greatly appreciated, Thank you
 

7 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Parsing Powerbroker Logs for SysAdmin Changes (SOX)

I need to identify a list of AIX command strings that can be used to parse Powerbroker logs for changes that are being made by Unix SysAdmins. Need to filter out (as much as possible) inquiry or routine maintenance activity and concentrate on software/security changes. This is for internal... (1 Reply)
Discussion started by: bcouchtx
1 Replies

2. Solaris

Difference between sudo & RBAC

Hello Everybody I would like to know any major difference between sudo & RBAC as I am bit familiar with RBAC but not with sudo (2 Replies)
Discussion started by: girish.batra
2 Replies

3. Solaris

sudo for solaris 8 & 9

Dear ALL please can anyone tell me from where can i install sudo for solaris 8 & 9 and how i can install it in the solaris server . (1 Reply)
Discussion started by: thecobra151
1 Replies

4. UNIX for Advanced & Expert Users

sudo & chdev

I have an error when using chdev with sudo as follows; sudo chdev -l rmt0 -a block_size=512 chdev: 0514-518 Cannot access the CuDv object class in the device configuration database. I've added chdev in sudoers but still get the error, I guess it's something to do with CuDv... (3 Replies)
Discussion started by: gefa
3 Replies

5. Solaris

Sudo Privileges & Sudoers Group

I'm looking for some suggestions to accomplish what a specific user needs, without adding them to the "sudoers" group. I have X user, that is requesting to be able to change file permissions on items owned by others and search directories where X user doesn't have access. I'm open to any... (2 Replies)
Discussion started by: Nvizn
2 Replies

6. Shell Programming and Scripting

Ssh & sudo

when the following command is issued the command prompt is received, how do I get past this? ssh -t usera@hosta sudo su - userb -c id (4 Replies)
Discussion started by: squrcles
4 Replies

7. Shell Programming and Scripting

Remoting sudo commands & bypassing bashrc

What I want to do is not unique, except that our environment has a twist. I want to ssh to a remote server and issue a sudo command to run a script. This isn't working, but you'll get the gist.# ssh remotehost sudo -i -u oracle script.bashThe sudo to oracle is fine. The script.bash sets up the... (4 Replies)
Discussion started by: JustaDude
4 Replies
mtailrc(5)							   User Manuals 							mtailrc(5)

NAME
mtailrc - Configuration file for monkeytail DESCRIPTION
A monkeytail configuration uses Apache-style syntax to declare "groups" of files to be tailed. Best explained with an example: <group testgroup> prefix 'server2: ' sudo yes <file> filename /var/log/apache2/access.log prefix 'server1: ' host server1.example.com </file> <file> filename /var/log/apache2/access.log host server2.example.com sudo no </file> </group> OPTIONS
All options can be either put inside a group or file block. Options inside a file block override those in the group block. filename filename filename defines the filename for this block. host remote-host (optional) host defines that this block's file is to be tailed on a remote server. sudo yes|no|1|0 sudo is a boolean specifying whether this file should be tailed as root. This option is supported for both local and remote files (in both cases you will potentially be prompted for your password). prefix "string: " prefix allows you to specify a short string that will be prepended to every line that is displayed for that given file. FILES
~/.mtailrc - user specific monkeytail config SEE ALSO
mtail(1), tail(1) AUTHOR
Martyn Smith <martyn@dollyfish.net.nz> mtail May 2008 mtailrc(5)
All times are GMT -4. The time now is 01:00 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy