Sponsored Content
Top Forums UNIX for Dummies Questions & Answers /etc/sudoers - Restricted Access Post 302307165 by tpietschmann on Tuesday 14th of April 2009 08:12:39 PM
Old 04-14-2009
no matter what rules you apply to prevent either of your desired options will result in circumvention. sudo bash gives them root access and then they can do what they want. If you want to achieve RBAC with sudo you HAVE to isolate users from root such that they are in a wheel group with explicit commands that may not impact privilege escalation on the system.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Restricted SSH Access

OS: FreeBSD 4.9-RELEASE I have ssh up and running. However, I need to restrict users to their home directory and to links withing those directories (i.e. htdocs/mysite and mysql/var). Is this possible? Any Suggestions? Thanks In advance. (2 Replies)
Discussion started by: ezekiel61
2 Replies

2. UNIX for Dummies Questions & Answers

Restricted Shells. . .

Hey, Could someone please help me distinguish between a captive account and a restricted shell? Many thanks, L. (0 Replies)
Discussion started by: crispy
0 Replies

3. HP-UX

Restricted Login ID

I have a task to create a new id that going to used by vendor. The ID profiles are: 1)The ID to be created is MUST be restricted sharing. 2)create for their own user account 3)unable to read/navigate/view other directories 4)unable to write to other directories able to create their own... (3 Replies)
Discussion started by: yeazas
3 Replies

4. Programming

restricted pointers

Hi all. I am trying to use restricted pointers to allow the gcc compiler optimize the code, but I have not been able to make it work so far. I am testing with this code: #include <stdlib.h> #include <stdio.h> #include <time.h> #include <sys/time.h> void vecmult(int n, int * restrict a, int... (0 Replies)
Discussion started by: carl.alv
0 Replies

5. UNIX for Advanced & Expert Users

Creating USERs with restricted Access

Hi There, i need to creat USERS in UNIX with restricted access to different directories. for example user1 should have access to dir1 and dir2 user2 should have access to dir2 and dir3 Please help me (4 Replies)
Discussion started by: ramanan25
4 Replies

6. Shell Programming and Scripting

To provide restricted access to certain user's on linux box

Hi, I need to provide execute access to certain users and not to all users For ex: if ther is a file /home/august/aug.sh. and there are user's like jan,feb,mar,april,May and jan is the owner of that box. I need to provide execute access to feb and mar only. I also know the root pwd for... (3 Replies)
Discussion started by: Ashok_oct22
3 Replies

7. HP-UX

how to view restricted sam access

Hello everybody, i need to check which users have resticted sam access..can anybody please let me know how to check this..? Thanks in advance.. (4 Replies)
Discussion started by: laxmikant
4 Replies

8. AIX

A user with restricted ftp access to a folder

Hi, We have Oracle Database on AIX 5.3 server.We want to give ftp access to a user to a specific folder.He should be able to put and get files from that specific folder only.Moreover he should not be able to cd to any other filesystems also along with root directory. Please note that as per... (1 Reply)
Discussion started by: dwiravi
1 Replies

9. AIX

Restricted shell

Hello I have a user with a Restricted Shell on a Aix 5.3. My question is about if I can add one more path on the home directory. I mean the user have in his home directory. for example /test/my_application/logs but I need that this user can view another log that is on another path, if this... (1 Reply)
Discussion started by: lo-lp-kl
1 Replies

10. Ubuntu

Restricted access possibilities

Hi, I have given a laptop from company with Ubuntu 10.04 on it. I have restricted access over it, means I have been given sudo login on it. SO I am unable to so many major activities over it, Can you all people tell me the Terminal tricks that I can use to get my hands on it. (1 Reply)
Discussion started by: nixhead
1 Replies
GKSU(1) 						      General Commands Manual							   GKSU(1)

NAME
gksu - a Gtk+ su frontend SYNOPSIS
gksu [ options ] <command> gksudo [ options ] <command> DESCRIPTION
This manual page documents briefly gksu and gksudo gksu is a frontend to su and gksudo is a frontend to sudo. Their primary purpose is to run graphical commands that need root without the need to run an X terminal emulator and using su directly. OPTIONS
These programs follow the usual GNU command line syntax, with long options starting with two dashes (`-'). A summary of options is included below. Common Options: --user <user>, -u <user> Calls <command> as the specified user --message <message>, -m <message> Replaces the standard message shown to ask for password for the argument passed to the option --sudo-mode, -S Use sudo instead of su as backend authentication system. Notice that the X authorization magic will not work when using sudo for target users other than root. --title <title>, -t <title> Replaces the default title with the argument --icon <icon>, -i <icon> Replaces the default window icon with the argument --print-pass, -p Asks gksu to print the password to stdout, just like ssh-askpass. Useful to use in scripts with programs that accept receiving the password on stdin. --disable-grab, -g Disables the "locking" of the keyboard, mouse, and focus done by the program when asking for password --ssh-fwd, -s Strip the host part of the $DISPLAY variable, so that GKSu will work on SSH X11 Forwarding. --login, -l Makes this a login shell. Beware this may cause problems with the Xauthority magic. Run xhost to allow the target user to open win- dows on your display! This is ignored if running with sudo as backend for authentication. --preserve-env, -k Preserve the current environments, does not set $HOME nor $PATH, for example. FILES
/etc/gksu.conf Configuration file to setup system-wide defaults for gksu/gksudo. It provides an option to force the display grabing, also. RETURN VALUE
On success, gksu will return 0. If an authentication error ocurred, it will exit with error code 3. If the user canceled the dialog or closed the window, it will return error code 2. On other error conditions, gksu will return 1. NOTE
Note that <command> and all its arguments should be passed as one single argument to gksu just like one would to when using su. SEE ALSO
su(1), gksuexec(1). AUTHOR
This manual page was written by Gustavo Noronha Silva <kov@debian.org> for the Debian GNU/Linux system (but may be used by others). 2003 GKSU(1)
All times are GMT -4. The time now is 05:50 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy