Re: [CentOS] giving normal user a super user privilege

2010-02-04 Thread Umarzuki Mochlis
my mistake, i had done sticky bit on /sbin/ifconfig yesterday
# chmod u+s /sbin/ifconfig

2010/2/5 Umarzuki Mochlis 

> I had added user umarzuki to wheel group
> # usermod -G wheel umarzuki
>
> *Yes, I can use/setup sudo but I do this just for learning purpose
>
> My /etc/pam.d/su as below
>
> authsufficient  pam_rootok.so
> # Uncomment the following line to implicitly trust users in the "wheel"
> group.
> #auth   sufficient  pam_wheel.so trust use_uid
> # Uncomment the following line to require a user to be in the "wheel"
> group.
> authrequiredpam_wheel.so use_uid
> authinclude system-auth
> account sufficient  pam_succeed_if.so uid = 0 use_uid quiet
> account include system-auth
> passwordinclude system-auth
> session include system-auth
> session optionalpam_xauth.so
>
> when i su to user umarzuki and view its id output
> $ id
> uid=500(umarzuki) gid=500(umarzuki) groups=10(wheel),500(umarzuki)
>
> and i tried run
> $ yum update
> Loaded plugins: fastestmirror
> You need to be root to perform this command.
>
> but i managed to change the interface's IP with this command
> $ /sbin/ifconfig eth0 192.168.1.1 netmask 255.255.255.0 up
>
> Is there a step that i missed?
>
>
> --
> Regards,
>
> Umarzuki Mochlis
> http://debmal.my
>



-- 
Regards,

Umarzuki Mochlis
http://debmal.my
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] giving normal user a super user privilege

2010-02-04 Thread Umarzuki Mochlis
I had added user umarzuki to wheel group
# usermod -G wheel umarzuki

*Yes, I can use/setup sudo but I do this just for learning purpose

My /etc/pam.d/su as below

authsufficient  pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel"
group.
#auth   sufficient  pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
authrequiredpam_wheel.so use_uid
authinclude system-auth
account sufficient  pam_succeed_if.so uid = 0 use_uid quiet
account include system-auth
passwordinclude system-auth
session include system-auth
session optionalpam_xauth.so

when i su to user umarzuki and view its id output
$ id
uid=500(umarzuki) gid=500(umarzuki) groups=10(wheel),500(umarzuki)

and i tried run
$ yum update
Loaded plugins: fastestmirror
You need to be root to perform this command.

but i managed to change the interface's IP with this command
$ /sbin/ifconfig eth0 192.168.1.1 netmask 255.255.255.0 up

Is there a step that i missed?


-- 
Regards,

Umarzuki Mochlis
http://debmal.my
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos