Re: [newbie] deny access to su

2002-05-15 Thread Ted J. Wagner
Mike, You've just made what is my point for me in the following: Mike Oliver wrote: Or maybe it's to prevent *inadvertant* rather than malicious damage? Something like: People in our group might find out the root pword and be tempted to su to quick-fix some difficulty they're having, then

Re: [newbie] deny access to su

2002-05-14 Thread Stormjumper
thanks to all who helped. esp. michael, this works, and is what i wanted to do. - Original Message - From: Michael Viron [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, May 14, 2002 1:24 PM Subject: Re: [newbie] deny access to su Change the group ownership on su to root:wheel

Re: [newbie] deny access to su

2002-05-14 Thread Mike Oliver
Michael Viron wrote: Change the group ownership on su to root:wheel . Next, remove execute permission from other on su. I have to say I find this option kind of puzzling. What's the rationale exactly? Why couldn't an opponent who knew the root pword just execute his *own* copy of su? It

Re: [newbie] deny access to su

2002-05-14 Thread Damian G
On Tue, 14 May 2002 13:21:59 -0700 Mike Oliver [EMAIL PROTECTED] wrote: Michael Viron wrote: Change the group ownership on su to root:wheel . Next, remove execute permission from other on su. I have to say I find this option kind of puzzling. What's the rationale exactly? Why

Re: [newbie] deny access to su

2002-05-14 Thread Dave Conroy
Hi Damian, Tuesday, May 14, 2002, 10:13:55 PM, you wrote: DG On Tue, 14 May 2002 13:21:59 -0700 DG Mike Oliver [EMAIL PROTECTED] wrote: Michael Viron wrote: Change the group ownership on su to root:wheel . Next, remove execute permission from other on su. I have to say I find this

Re: [newbie] deny access to su

2002-05-14 Thread Mike Oliver
Damian G wrote: On Tue, 14 May 2002 13:21:59 -0700 Mike Oliver [EMAIL PROTECTED] wrote: Michael Viron wrote: Change the group ownership on su to root:wheel . Next, remove execute permission from other on su. I have to say I find this option kind of puzzling. What's the rationale exactly?

Re: [newbie] deny access to su

2002-05-14 Thread Bryan Whitehead
Mike Oliver wrote: Change the group ownership on su to root:wheel . Next, remove execute permission from other on su. I have to say I find this option kind of puzzling. What's the rationale exactly? Why couldn't an opponent who knew the root pword just execute his *own* copy of su? It seems

Re: [newbie] deny access to su

2002-05-14 Thread Damian G
On Tue, 14 May 2002 22:27:58 +0100 Dave Conroy [EMAIL PROTECTED] wrote: Hi Damian, Tuesday, May 14, 2002, 10:13:55 PM, you wrote: quote of a post i made... With best wishes, Dave umm.. what's up with this? i've seen at least four or five replies like this from 'Dave' to several

Re: [newbie] deny access to su

2002-05-14 Thread Michael Viron
I'm not saying that it's the best way to do things, but they did ask if it was possible It's much better to have users you trust on your box then to have ones you don't. Actually, the below is only part of the answerthere is something in the shells that can be done to ignore any

Re: [newbie] deny access to su

2002-05-14 Thread Damian G
On Tue, 14 May 2002 14:50:01 -0700 Mike Oliver [EMAIL PROTECTED] wrote: Damian G wrote: On Tue, 14 May 2002 13:21:59 -0700 Mike Oliver [EMAIL PROTECTED] wrote: Michael Viron wrote: Change the group ownership on su to root:wheel . Next, remove execute permission from other on su.

Re: [newbie] deny access to su

2002-05-14 Thread David
Damian G said onto me: -- |On Tue, 14 May 2002 22:27:58 +0100 |Dave Conroy [EMAIL PROTECTED] wrote: | | Hi Damian, | | Tuesday, May 14, 2002, 10:13:55 PM, you wrote: | | quote of a post i made... | | |

[newbie] deny access to su

2002-05-13 Thread Stormjumper
hi, i'm running mandrake 8.2. i would like to deny certain user groups from running su. eg, if i create a group project, and wanna deny all users of project from being able to su. how do i do it? i've tried manually removing users from the wheel group, in /etc/group, but somehow the users

Re: [newbie] deny access to su

2002-05-13 Thread Michael Viron
Change the group ownership on su to root:wheel . Next, remove execute permission from other on su. Michael -- Michael Viron Core System Administration Team Simple End User Linux At 12:23 PM 5/14/2002 +0800, you wrote: hi, i'm running mandrake 8.2. i would like to deny certain user groups

Re: [newbie] deny access to su

2002-05-13 Thread civileme
Stormjumper wrote: hi, i'm running mandrake 8.2. i would like to deny certain user groups from running su. eg, if i create a group project, and wanna deny all users of project from being able to su. how do i do it? i've tried manually removing users from the wheel group, in /etc/group, but