Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: User with root privileges in hp ux
Operating Systems HP-UX User with root privileges in hp ux Post 302890996 by vbe on Monday 3rd of March 2014 04:39:44 AM
Old 03-03-2014
As I already mentionned the safest is to create a /etc/securetty fille with the only devices you allow root connection: If you have a true console or lan console you put in that file a line with just console :
Code:
ran1:/home/vbe $ ll /etc/securetty; cat /etc/securetty 
-r--r--r--   1 root       sys              8 Oct  3  2001 /etc/securetty
console

If you know what tasks the user needs with root privileges, admin tasks? you can try to grant them using sam : You can grant the user a restricted SAM with the privileges to taks the user is allowed ( but the tool isnt complete, better than nothing though and avoids the use of su, you will have the SAM activitiy the user did with his own ID...)
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Root privileges &Sudoer

Hi guys... how can a root assign a user all or most of the root privileges? is sudoer comand enough 4 this? thx alot.. (2 Replies)
Discussion started by: blue_7
2 Replies

2. Programming

root privileges

Hi I have make a program that needs root privleges but any user can try to run it, so what I want it is, when any user tries( other than root ) to run the program, an input prompt would open to enter root password ( if user knows ) and program will run ( otherwise exit ), and after completing... (21 Replies)
Discussion started by: sumsin
21 Replies

3. Solaris

sshd (openssh) on SunOS without root privileges

Hi, I've just managed to install openssh in my home directory on a server I have access to by using --prefix=$HOME/local after ./configure. Another thing I was having trouble with without root access was privilege separation, so I disabled that in my sshd_config. However, when I run... (10 Replies)
Discussion started by: sayeo
10 Replies

4. UNIX for Dummies Questions & Answers

root privileges

Hello, As admin with root rights, to execute any command from another user without password-ask, I do : su - <user> -c "<cmd>" But how can I do to give the same rights to another physical user without using root user ? :confused: I've try to create another user "toor" with the same primary... (4 Replies)
Discussion started by: madmat
4 Replies

5. Linux

grant root privileges to ordinary user

Hi, Is it possible to grant root privileges to an ordinary user? Other than 'sudo', is there some way under Users/Groups configuration? I want ordinary user to be able to mount, umount and use command mt. /Brendan (4 Replies)
Discussion started by: brendan76
4 Replies

6. Shell Programming and Scripting

Python: Bind to port 80 as root, then drop privileges?

I have written a small web server in Python, and now I would like to run it on port 80, but in order to be able to bind to a port below 1024 I need to have root privileges. I don't want to run the server as root, though. How can I bind to port 80 as root and then drop root privileges? Thankful... (0 Replies)
Discussion started by: Ilja
0 Replies

7. Shell Programming and Scripting

Privileges like root

My English is no very good. I must make a bash scripting sh create like a backdoor, and when execute the script a user without privileges convert in super user or root, whithout introducing the password. In Spanish: Crear un script que sirva como puerta trasera al sistema, de manera que al... (1 Reply)
Discussion started by: kitievbr
1 Replies

8. Solaris

Gaining root privileges

Hello I am a new (and only) administrator of a Solaris 10 environment. The previous admin gave me a use (say user123) that is supposed to have administrative privileges. Now the problem is, the user does not have this privilege! Here is what i tried so far: $ id uid=109(user123) gid=1(other)... (3 Replies)
Discussion started by: abohmeed
3 Replies

9. UNIX for Dummies Questions & Answers

Can you gain root privileges if the suid program does not belong to root?

I had a question in my test which asked where suppose user B has a program with 's' bit set. Can user A run this program and gain root privileges in any way? I suppose not as the suid program run with privileges of owner and this program will run with B's privileges and not root. (1 Reply)
Discussion started by: syncmaster
1 Replies

10. Infrastructure Monitoring

Monitoring tools that do NOT require root privileges

Hi guys, I am currently managing an application running on around 150 servers. I only have application usage rights on those servers and do not have any root privileges. I have an external node that can connect to those servers and I have root privileges on that one box. I want to setup... (2 Replies)
Discussion started by: Junaid Subhani
2 Replies

LEARN ABOUT POSIX

pam_securetty

PAM_SECURETTY(8)						 Linux-PAM Manual						  PAM_SECURETTY(8)

NAME

       pam_securetty - Limit root login to special devices

SYNOPSIS

       pam_securetty.so [debug]

DESCRIPTION

       pam_securetty is a PAM module that allows root logins only if the user is logging in on a "secure" tty, as defined by the listing in
       /etc/securetty. pam_securetty also checks to make sure that /etc/securetty is a plain file and not world writable. It will also allow root
       logins on the tty specified with console= switch on the kernel command line and on ttys from the /sys/class/tty/console/active.

       This module has no effect on non-root users and requires that the application fills in the PAM_TTY item correctly.

       For canonical usage, should be listed as a required authentication method before any sufficient authentication methods.

OPTIONS

       debug
	   Print debug information.

       noconsole
	   Do not automatically allow root logins on the kernel console device, as specified on the kernel command line or by the sys file, if it
	   is not also specified in the /etc/securetty file.

MODULE TYPES PROVIDED

       Only the auth module type is provided.

RETURN VALUES

       PAM_SUCCESS
	   The user is allowed to continue authentication. Either the user is not root, or the root user is trying to log in on an acceptable
	   device.

       PAM_AUTH_ERR
	   Authentication is rejected. Either root is attempting to log in via an unacceptable device, or the /etc/securetty file is world
	   writable or not a normal file.

       PAM_INCOMPLETE
	   An application error occurred. pam_securetty was not able to get information it required from the application that called it.

       PAM_SERVICE_ERR
	   An error occurred while the module was determining the user's name or tty, or the module could not open /etc/securetty.

       PAM_USER_UNKNOWN
	   The module could not find the user name in the /etc/passwd file to verify whether the user had a UID of 0. Therefore, the results of
	   running this module are ignored.

EXAMPLES

	   auth  required  pam_securetty.so
	   auth  required  pam_unix.so

SEE ALSO

       securetty(5), pam.conf(5), pam.d(5), pam(7)

AUTHOR

       pam_securetty was written by Elliot Lee <sopwith@cuc.edu>.

Linux-PAM Manual						    09/19/2013							  PAM_SECURETTY(8)
All times are GMT -4. The time now is 02:39 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy