03-11-2019
We are not being obtuse, being overly literal, or blocking you. We're telling you that your question is nonsensical. You cannot stop root from being root. Period. Full stop. Any measures you use to stop them, they have full access to undo themselves, by definition.
For instance, useradd and userdel aren't magic -- they edit files. Block them and they can just edit the files by hand, or install something else for the purpose. Block access to the files and bad things will happen since the system needs these files.
You will have to approach the problem from another angle. Rather than 'limit what root can do', you will need to very precisely specify what they are actually allowed to do, and permit that in a non-root user via sudo.
These 5 Users Gave Thanks to Corona688 For This Post:
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I need to set up/modify a user account on one of our machines which will allow the user to stay on the system, but not use their user id and password to login to the machine. It is for the purposes of an ftp user, so that nobody can then login as ftp/passwd. Ta.:) (2 Replies)
Discussion started by: danhodges99
2 Replies
2. AIX
Hi all,
I am a newbe to aix 5.2. I want to specify the characters used by users while creating user in aix like specifying the length of the password
should i use some sript for that if it is then please let me know how to do this
if yes give me the link for the scripts.
Thanks in advance
... (2 Replies)
Discussion started by: Satya Mishra
2 Replies
3. UNIX for Dummies Questions & Answers
I created a user, i login as a root. I add him in the group where he can access and login as a root! I checked it in users' list and in group's list, he is there. My problem is this, I cant login using the username/account I just created! What should i do to use and login the user/account i've just... (5 Replies)
Discussion started by: jerome
5 Replies
4. Shell Programming and Scripting
Hi,
My requirement is that i am login from ROOT in a script but when any
command is coming which is logging to sqlplus then i have to run it with normal user as only normal user have permission to connect to sqlplus .
i tried making a script like this :
#! /bin/ksh
su -... (3 Replies)
Discussion started by: rawatds
3 Replies
5. Cybersecurity
Dears
I want to prevent users from doing spesific command "history -c" or "history" in general
How can I do ? (4 Replies)
Discussion started by: reaky
4 Replies
6. IP Networking
hi all,
i want to prevent users downloading files in the office as bandwidth becomes very low
and affects work.
one of my friend tried to close the connection using ethercap but this does not work.
i have a debian desktop while other users use MS W!ndows.
Please provide any help. Thanks (5 Replies)
Discussion started by: coolatt
5 Replies
7. Shell Programming and Scripting
Hi Every body,
I would need a shell script program to login as different user and perform some copy commands in the script.
example: Supppose ora_toms is the active user
ora_toms should be able to run a script where user: ftptomsp pass: XXX should login through and run the commands
... (9 Replies)
Discussion started by: ujjwal27
9 Replies
8. Shell Programming and Scripting
now i have logged in username : ramesh in unix
Now i have to created script file to login into another user and have run a command inside that user and after executing the command i have to exit from that user.
Inside script, i have to login into su - ram along with password : haihow and have to... (4 Replies)
Discussion started by: rammm
4 Replies
9. Shell Programming and Scripting
Hi could some let me know how to prevent user from changing his home directory.......
Thanks in advance.... (1 Reply)
Discussion started by: Revanth547
1 Replies
10. Shell Programming and Scripting
Hi could some let me know how to prevent user from changing his home directory.......
Thanks in advance.... (6 Replies)
Discussion started by: rahul547
6 Replies
LEARN ABOUT ULTRIX
fitset
fitset(8) System Manager's Manual fitset(8)
Name
fitset - determine if subset fits on a system
Syntax
fitset [ -d ] [ root-path ]
Description
The utility is used to determine if the files in a software subset will fit on a system.
Subset inventory records are read from the standard input. For each record, the space required to install the file described in that record
is deducted from the available free space on the file system to which it would be installed. Only currently mounted UFS file systems are
used in the computations. Space requirements for files already on the disk will be modified to account for the size of the resident copy.
After all records have been read, the free space computed for all file systems is checked. If the space required to install the files would
cause any file system to be more than 90% full, returns an exit status of -1.
The utility uses to size all subsets before attempting to install them. The root-path argument is the pathname of the top directory for
the hierarchy into which the files are going to be installed. If no root-path is specified, the directory '/' is assumed.
Options
-d Enable debugging. This will make print voluminous status information on standard output. This information is the initial file system
statistics, the file system location of the file from each input record and the statistics for the file system after the space
required to install the file has been deducted.
Restrictions
NFS mounts are ignored. If software would be installed to an NFS mounted directory, it is sized against the file system containing the NFS
mount point.
The program does not detect the use of symbolic links in paths to root-path or any of the mount points. This can cause to size a subset
incorrectly if root-path is a symbolic link or a symbolic link exists in the path of any of the pathnames used with the command to mount
local file systems.
Examples
To determine if a particular subset will fit on the system, redirect the contents of the subset inventory file into For example:
fitset < /usr/etc/subsets/ULTUUCP400.inv
To determine if the same subset will fit in a hierarchy rooted at the command would be:
fitset /var/tmp/root < /usr/etc/subsets/ULTUUCP400.inv
Diagnostics
fitset: root path must be absolute
A relative pathname was specified for root-path. This path must be absolute.
fitset: cannot stat root-path (error message)
The root-path cannot be accessed. The error message provides more information.
fitset: root-path is not a directory.
Either root-path is not a directory or it is a symbolic link to something which is not a directory.
Files
Subset inventory files
See Also
stl_inv(5), setld(8)
Guide to Preparing Software for Distribution on ULTRIX Systems
fitset(8)