> jimw::::type=normal;profiles=File System
> Management,ZFS File System Management
> 
> which doesn't give jimw the ability to su to root but
> does give some,
> but not all, additional privs when he pfexec's
> commands.

I know that this is only an example but I prefer using zfs allow to grant zfs 
command usage to users without having them pfexec. I wish zones had the same 
functionality built in that would allow zoneadm privilege for a given user. 

For root not logging who did what I always use a root.## account for different 
admins to use root. None know that real root password and they login as there 
root.## account which is set to uid 0. This tracks usage as the logs now log 
root.__ did this.
-- 
This message posted from opensolaris.org
_______________________________________________
opensolaris-discuss mailing list
[email protected]

Reply via email to