Re: SU privileges

From: Jan-Frode Myklebust (janfrode_at_PARALLAB.UIB.NO)
Date: 06/24/04

  • Next message: faisalq_at_CYBER.NET.PK: "Re: AIX-L Digest - 10 Jul 2001 to 11 Jul 2001 (#2001-193)" 
    Date:         Thu, 24 Jun 2004 14:10:15 +0200
To: aix-l@Princeton.EDU

    On Thu, Jun 24, 2004 at 06:49:06AM -0500, David Zarnoch wrote:
    >
    > How would I set up a group to allow SU privileges?

    To limit that only specific users are allowed to use the 'su' command?
    Then adding these users to group=security and changing the permissions
    on /usr/bin/su should do the trick:

            % ls -ld /usr/bin/su
            -r-sr-xr-x 1 root security 18980 Apr 30 2003 /usr/bin/su
            % chmod 4550 /usr/bin/su
            -r-sr-x--- 1 root security 18980 Apr 30 2003 /usr/bin/su

    > Could I create a group "rootprvl" or would I need to use "sudo"?

    If you want to give a group of users the possibility to run 'su -
    $username' without needing to know the password of $username, then I
    think 'sudo' is the best solution.

      -jf

     (awaiting a flood of vacation messages from misconfigured vacation
      programs from the users on this list)

  • Next message: faisalq_at_CYBER.NET.PK: "Re: AIX-L Digest - 10 Jul 2001 to 11 Jul 2001 (#2001-193)"

    Relevant Pages

    • Re: Query for blank passwords in Active Directory
      ... Depending on your Domain Controllers configuration, it may be extremely easy to enumerate users, even without having credentials for accessing the AD domain. ... If rpcclient's "enumusers" command doesn't work, it may still be possible to get the users list scanning for SIDs. ... If you're stuck on Windows as testing plaform, you should also take a look at enum.exe. ... username as well as username = password). ...
      (Pen-Test)
    • Re: Any Way to Validate Username & Password from an Application?
      ... We need to have this functionality in one of our OpenVMS ... At the time such privileges need to be used, ... is necessary to validate the username and password for several reasons. ... we are using a hack in order to get this functionality. ...
      (comp.os.vms)
    • Any Way to Validate Username & Password from an Application?
      ... We need to have this functionality in one of our OpenVMS ... At the time such privileges need to be used, ... is necessary to validate the username and password for several reasons. ... we are using a hack in order to get this functionality. ...
      (comp.os.vms)
    • Re: Using NET SEND for a pop-up box
      ... Why not use a batch file and some ECHO commands instead? ... I've done a bit of testing and found that NET SEND <username> ... Sc.exe config "messenger" start= auto ... The first part is using the SC command Microsoft released to make sure ...
      (microsoft.public.win2000.networking)
    • Re: Connect to VPN from command line?
      ... Yes, and again from my original question, how can I make the call ... WITHOUT embedding username and password in the command line? ... Windows Explorer can launch a network connection using saved ...
      (microsoft.public.windowsxp.general)