Root access that can't change root password? Post: 302879844

Sponsored Content

Operating Systems Linux Ubuntu Root access that can't change root password? Post 302879844 by rbatte1 on Monday 16th of December 2013 06:24:04 AM

12-16-2013

Moderator

.... or editing the /etc/sudoers file and the user can take off the restrictions again.

How about you ask exactly what is needed and only permit that with sudo rules. Be sure not to allow access to anything that the user can escape from, e.g. by giving vi, then user can probably :sh to get to a command prompt as the executing user.

Other things sudo as ftp can also be used to run local shell commands too. You have to be very careful.

Perhaps there is a need for not giving root access to the user. Ask what needs to be done, get it scripted and tested, then make the script Read-Only to them, but have it owned by root and set the SUID flag with:-

Code:

chown root:group yourscript
chmod 4750 yourscript

Make sure that the world cannot execute the script and set the group to be a restricted as you can. perhaps even create a group for just this use.

i hope that this helps or at least gives you something to consider.

Robin
Liverpool/Blackburn
UK

rbatte1

View Public Profile for rbatte1

Visit rbatte1's homepage!

Find all posts by rbatte1

9 More Discussions You Might Find Interesting

1. Linux

how to access root priveliges if root password is lost

wish to know how to access root password it root password is forgotten in linux

2. Solaris

change root password

Hi, please advise me what is the simplest way to change root password on Sun Sparc 64 bit with Solaris 9 on it. Thanks in advance.

3. UNIX for Dummies Questions & Answers

Change other account password from root access

Hi, I have forgotten my personal account password but I still have the root access to the box. Please tell me how can I change my other account password by logging as root. Thanks. Rakesh :D

4. HP-UX

Change root password?

Hello! I forget the root password and I need to change it. I've read others threads about it in this forum, but it seems it's necessary to modify /etc/passwd file. In my HPUX Systems this passwd file have only "read" permissions ant its owner is the root user, so how can i modify this file, if I...

5. HP-UX

How to change ROOT password.

Hi, we have a HP-UX server of model 9000/800/rp4440. We have been trying to reset the root password but are in vain.I used the following command and also are the outputs which i have received. # passwd Changing password for root New password: Re-enter new password: Unexpected failure....

6. Shell Programming and Scripting

how to change root password using shell script with standard password

Hi Friends. I am new to scripting now i want to change the root password using the script with standard password. which is the easy scripting to learn for the beginner, Thanks in advance.

7. Solaris

Solaris 8 - Asks for current root password when trying to change root password.

Hello All, I have several solaris boxes running Solaris 8. When changing root passwords on them, all will simply ask for the new root password to change and of course to re-type the new password. One of the systems however asks for the existing root password before it will display the new password...

8. UNIX for Advanced & Expert Users

One user to su to another without allowing root access and password

Hello Gurus, I want One user to su to another without allowing root access and password. I want to run a specific command as below from user am663: --------------------------------------------------------- sudo -u appsprj4 /home/appsrj4/scripts/start_apache.sh ------------------- But...

9. UNIX for Beginners Questions & Answers

Can a root role change the root password in Solaris 10?

i do not have root on a solairs 10 server , however i do have the root role, i was wondering if I can change the root password as a a role with the passwd command? I have not tried yet. and do i have to use the # chgkey -p afterwards? i need to patch is why i am asking. thanks

LEARN ABOUT SUNOS

dialups

dialups(4)							   File Formats 							dialups(4)

NAME

       dialups - list of terminal devices requiring a dial-up password

SYNOPSIS

       /etc/dialups

DESCRIPTION

       dialups	is  an	ASCII file which contains a list of terminal devices  that require a dial-up password. A dial-up password is an additional
       password required of users who access the computer through a modem or dial-up port.  The correct password must be entered before  the  user
       is granted access to the computer. The set of ports that require a dial-up password are	listed in the dialups file.

       Each entry in the dialups file is a single line of the form:

	      terminal-device

       where

       terminal-device	       The  full  path	name  of the terminal device that will require a dial-up password for users accessing the computer
			       through a modem or dial-up port.

       The dialups file should be owned by the root user and the root group.  The file should have read and write permissions for the owner (root)
       only.

EXAMPLES

       Example 1: A sample dialups file.

       Here is a sample dialups file:

       /dev/term/a
       /dev/term/b
       /dev/term/c

FILES

       /etc/d_passwd	       dial-up password file

       /etc/dialups	       list of dial-up ports requiring dial-up passwords

SEE ALSO

       d_passwd(4)

SunOS 5.10							    4 May 1994								dialups(4)