Garrett Wollman <[EMAIL PROTECTED]> writes:
> su(8) already has the behavior you want.  (Now implemented in a PAM
> module, and I forget the precise details.)

You're probably thinking of the auth_as_self option in pam_unix(8).
It was introduced by Mark four years ago.

However, what sudo(1) has that su(8) lacks is the ability to control
which commands the user is allowed to execute with elevated
privileges.

DES
-- 
Dag-Erling Smørgrav - [EMAIL PROTECTED]

_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to