Cybersecurity

As system admin i decided not to give shell access to users and even application admins on production systems.
I give them access via a simple (menu)webpage and the menus are suid capable.
So, even root commands can be granted to someones menu.
I like the fact that no commandline trying or messups with parms are possible.
Our security managers are happy the data is protected that well. Because the application admin could see/change data with its cridentials.

Offcourse when there are major problems, shell access might be needed. But most of then time you can manage with the menus.

Am i the only one?
If not what tools do you use?

Fjd.

Web services to view data, logs, printers, a readonly id to use some Oracle Forms.

Admin updates and printer control are done thru AppWorx jobs, which are very tightly controlled. So nobody: user or manager gets to any prompt on a production unix box.