Re: what is operator group for?

can anyone tell me what the operator group is for, or docs where I can
read about it? I see that /sbin/shutdown and /sbin/mk_snap_ffs are both
executable by members and various things in /dev/ are mountable by them.

My understanding is that group "operator" is intended for those who
deal with devices, e.g. running backups and monitoring printers.

I want a regular user to be able to mount removeable media and shutdown
the computer. If I make them a member of operator group what else am I
allowing them to do?

With the usual permission settings, you are also allowing them to read
disks directly (e.g. with dump(8)), and thus to read any file on the
system -- including the system's and other users' private key files.

One alternative is sudo.
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Question about data persistence in Public variables
    ... Session and/or Cache is used to ... That is my understanding but it is not what I am seeing. ... > is that these members have the same lifetime as Shared members. ... > Shared variable has only a single lifetime, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Yet another OO question...
    ... one of the main problems I've got understanding OO (and teaching ... That is, the only values that should be used in any method are the instance members of the class you're operating in, and the parameters to the method. ... Try to keep all of the members of a class focused on a single purpose. ...
    (comp.lang.java.programmer)
  • Re: ADUC Queries - Members of Security Group
    ... understanding of how this technology works. ... formats and it appears all of the wrong ones. ... To retrieve user members I would suggest: ... However, to retrieve members of any class (users, contacts, groups, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Much more complicated that you think.
    ... >not understanding my question. ... >classes, plus their members, constants, enumerators etc. ... >that when I then activate a menu, Accelerator key, or toolbar item, I can ...
    (microsoft.public.vc.mfc.docview)
  • RE: SID Values
    ... 321538 All members of a group may not be returned when you enumerate ... Whoami is a command line tool. ... Thank you for your understanding. ... we do not offer script support in the newsgroup. ...
    (microsoft.public.windows.server.migration)