Re: Security, ownership and daemon startup

2001-05-10 Thread William Goedicke 

Dear Y'all - 

Paul DuBois writes:

 > At 9:53 AM -0400 5/9/01, Brian Cuttler wrote:
 > >
 > >The developers that want to use the database would like ownership
 > >of the files and daemon so that they can modify and restart at will.
 > 
 > Tell them to pick one of their accounts to be used for running the server.

You should also look into a security utility called "sudo"
http://www.courtesan.com/sudo/.  It allows you to provide and revoke
additional authorizations to particular users and to log their
activities when using those extra privileges.  This allows you to
leave the mysql stuff under the ownership of a non-user account and
manage all the access business rules via the sudo config file.

This worked great for me; I hope it helps you.

 Yours -  Billy

-
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/   (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Re: Security, ownership and daemon startup

2001-05-09 Thread Paul DuBois 

At 9:53 AM -0400 5/9/01, Brian Cuttler wrote:
>Hello,
>
>We are installing MySQL 3.22.21 as pre-built for IRIX, installing
>on IRIX 6.5.7m.
>
>The developers that want to use the database would like ownership
>of the files and daemon so that they can modify and restart at will.

Tell them to pick one of their accounts to be used for running the server.


>
>I need to know if its safe to open access and if so, which files
>should (an individual or group) be given.

It will be as safe as any other program that one of these individuals
runs.  Since you're installing a pre-built distribution, change the
ownership of all the files in that distribution to the account that
will be used to run the server.

>
>By same I'm meaning from the system point of view, I would like to
>warn the developers of any problems they may run into at the development
>level but can't take responsibility for those issues if they do
>request control after being warned.

That's a bit hard to parse, but if I understand you correctly, they
shouldn't have any particular problems as long as they understand what's
involved in adminstering a MySQL installation.

>
>So, can I turn over ownership safely ? Which files ?

See above.

>
>   thanks in advance,
>
>   Brian
>---
>Brian R Cuttler [EMAIL PROTECTED]
>Computer Systems Support(v) 518 486-1697
>Wadsworth Center(f) 518 473-6384
>NYS Department of HealthHelp Desk 518 473-0773


-- 
Paul DuBois, [EMAIL PROTECTED]

-
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/   (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php