Who gets root?



Greetings all,



I know that to many of you the following question may seem inane, But I and
in need of your support as that I am in battle and need your advice. I have
a question regarding the policy of the control of root. As to who should
have it (between the Sysadmin , Application owners or other users)



My department are administrators of a number of SUN Solaris ( 9 and 10) and
I am responsible for the OS and Hardware. In many cases we have to share
root with individuals that are not in my department and at times with
outside vendors (The other people are part of my division, but not in my
chain of command) and not located in my building. There primary function is
the administration of the applications (i.e. Web Hosting and third party
apps)



We use sudo (http://www.courtesan.com/sudo/) to give access to non-privilege
areas as much as possible, But encounter much grief and demands for root
access. What I would like to know is your thoughts so that I may present
them to my management to show them that our thought s on the subject is not
off from the norm.







1-Who has root access in your shop?



2- How is privilege access handled in your shop?



3-What risk do I run by having root out side of a controlled group?



Please reply to this address (ac6699@xxxxxxxxx) and I will summarize your
thought and post to the list as well as inform the list of the out come if
any. I thank you for your advice and help
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



Relevant Pages

  • Re: WERE ON THE WAY... ROCKIES ARE COMIN
    ... the same sorts of folks that shop at walmart and use webtv (which the OP ... I root for the teams that I root for, ...
    (alt.sports.baseball.bos-redsox)
  • Re: Rear diagonal arm -- fasterner question
    ... I went to a shop and order the bushings. ... I show a picture ... of a T2 with the height root on the desk. ...
    (rec.autos.makers.vw.aircooled)
  • Re: DACL from root of C is gone?
    ... Generally administrators and system have full ... Also check the folder properties to see if somehow it became ... command as shown in KB link to reset ntfs permissions. ... The local and domain admins can not get to the root of C either. ...
    (microsoft.public.win2000.security)
  • Re: Comparing Linux to Windows (possible flame, hopefully not...)
    ... > It even took me six months to convince my boss to stop running as ... I told him if he insisted on running as root all ... additional accounts, except from the Administrator account, but all these ... since Administrators have full control of everything. ...
    (alt.os.linux.suse)
  • Re: Windows 2003 DNS with dedicated root and peer domain
    ... I’ve given the empty / dedicated root setup some careful thought and see it ... What are the work arounds for child/peer domain admins gaining forest wide ... My current setup has a secondary DNS copy of the root domain in my main ... > for the usual administrator and if you have multiple administrators you ...
    (microsoft.public.windows.server.dns)