On Wed, Jan 7, 2009 at 1:55 AM, zelda <[email protected]> wrote: > On Jan 6, 10:50 pm, "Chris Miller" <[email protected]> > wrote: >> On Tue, Jan 6, 2009 at 5:04 AM, zelda <[email protected]> wrote: >> >> > Hi, >> >> > I need to create a special user account for managing services like >> > tomcat, oracle or postgres. It means to create user with the same >> > rights like those services have. >> >> > I think adding user in groups tomcat, oracle and postgres won't be >> > enough... >> >> > Any suggestions? >> >> > Thanks for reply and sorry about my english, >> >> Au contraire, those user groups exist so that those daemons can run >> without root privileges (if they become compromised, then the extent >> of the damage is limited). >> >> -- >> Registered Linux Addict #431495http://profile.xfire.com/mrstalinman| John >> 3:16!http://www.fsdev.net/|http://lordsauron.wordpress.com/ >> Parents, Take Responsibility For Your Kids!http://www.whattheyplay.com/ > > Well, I try to reform my question. If I create a user and put him into > groups tomcat, oracle and postgres will this user be able to manage > these services? Completely?
Absolutely. That user will be unable to modify that daemon's configuration settings in /etc (which are controlled by root) but if it is necessary you can chown the relevant files to the group to allow editing by that group. -- Registered Linux Addict #431495 http://profile.xfire.com/mrstalinman | John 3:16! http://www.fsdev.net/ | http://lordsauron.wordpress.com/ Parents, Take Responsibility For Your Kids! http://www.whattheyplay.com/ --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Linux Users Group. To post a message, send email to [email protected] To unsubscribe, send email to [email protected] For more options, visit our group at http://groups.google.com/group/linuxusersgroup -~----------~----~----~----~------~----~------~--~---
