lcokstat delegation

From: Arunkumar Arumugam (aarumuga_at_gmail.com)
Date: 08/25/05

  • Next message: Smith, William E. (Bill), Jr.: "SUMMARY: Problems authenticating users via AD with Kerberos on Solaris 9" 
    Date: Thu, 25 Aug 2005 10:41:27 -0700
To: sunmanagers@sunmanagers.org

    Hi Everybody-
    I am trying to relax the permissions to execute the lockstat command
    other than root user.

    Operating system -Solaris 2.6 and 2.8

    Usually the lockstat command access is restricted to root user - as
    per the man page - it would incur a significant small load on the
    system.
    I am trying to delegate the access to a small group of users. by
    changing the /dev/lockstat permission to 660 and owned by root and
    group "restricted". and also changing the /etc/minor_pem lockstat stat
    info to accomodate the change
    lockstat@... 600 root sys
    to
    lockstat@... 660 root "restricted"
    I tested and it works as expected.

    Pls let me know , if I should consider anything more before putting
    this into production.

    Thanks
    Arun A
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers

  • Next message: Smith, William E. (Bill), Jr.: "SUMMARY: Problems authenticating users via AD with Kerberos on Solaris 9"
    • Quantcast