[LINUX:18420] Re: freebsd (su)

---------

New Message Reply About this list Date view Thread view Subject view Author view

From: Omer Faruk Sen (ofsenlinux@yahoo.com)
Date: Thu 03 Aug 2000 - 17:10:50 EEST


sanirim yanlis anlasildi.Ben bu islemin Linux te nasil
yapilacagini anlattim.Bildigim kadari ile Freebsd de
otamatik bu ozellik var en azindan 4.0 da :) Bu arada
ek olarak normakde /bin/su nun modu 4751 onu 4750
yapmak lazim others larin calistirmamasi lazim en
iyisi ekte gonderdigim dokuman sanirim

=====
YILDIZ UNIVERSITESI
ELEKTRONIK ve HABERLESME
ofsenlinux@yahoo.com
ofsen@yahoo.com
/*In God We Trust But All others must have a X.509 ceritificate
*/

__________________________________________________
Do You Yahoo!?
Kick off your party with Yahoo! Invites.
http://invites.yahoo.com/

Feb 11, 1999 07:32 from Postwave
On, Linux, I usually set up PAM such that one must be in the 'wheel' group in
order to su. Like this:

auth required /lib/security/pam_pwdb.so shadow nullok
auth required /lib/security/pam_wheel.so group=wheel
account required /lib/security/pam_pwdb.so
password required /lib/security/pam_cracklib.so
password required /lib/security/pam_pwdb.so shadow use_authtok nullok
session required /lib/security/pam_pwdb.so

Then, edit /etc/group (or better, use groupmod if you're using Red Hat or some
other distribution with shadow-utils) and put your admins in the wheel group.

Another approach -- good for large installations -- is sudo, which can give
people selective, logged access to specified commands which will run as
superuse, without them needing to know the root password.
[Unix And Networking> msg #107830 (0 remaining)] Read cmd ->

 
 Listeden cikmak icin:
          unsub linux
 mesajini listeci@bilkent.edu.tr adresine gonderiniz.
   Lutfen Listeci icin MIME / HTML / Turkce Aksan kullanmayin.
 Listeci arayuzu: http://listweb.bilkent.edu.tr/yardim/bilkent/linux.html
 Liste arsivinin adresi: http://listweb.bilkent.edu.tr/


New Message Reply About this list Date view Thread view Subject view Author view

---------

Bu arsiv hypermail 2b29 tarafindan uretilmistir.