* martin f krafft ([EMAIL PROTECTED]) [050708 02:23]:
> also sprach Johann Spies <[EMAIL PROTECTED]> [2005.07.08.1057 +0200]:
> > How is it possible that I can enable this user not only to run
> > programs from this directory, but to kill the process he started when
> > necessary using SUDO - without enabling him to kill any process on the
> > machine.
> 
> The only way to do this is to write a script which ensures that the
> PID is within the range of allowed PIDs, and then to give sudo
> access to the script. Beware that it's easy to make mistakes in
> scripts which could allow the user to gain root rights.

For this particular task, it sounds like you could use pkill -x instead
of writing a custom script.

good times,
Vineet
-- 
http://www.doorstop.net/
-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?

Attachment: signature.asc
Description: Digital signature

Reply via email to