On Thu, Nov 04, 2010 at 03:11:43AM -0700, hywl51 wrote: > Yes, you said it. Unfortunately, we have some users running as root > privilege on server, because they cann't work without it.
Are they admins or developers? If developers, then there is always a way round - sudo, fakeroot, giving them virtual hosts to play with. If they really need to be adminning the boxes then sudo will take you so far, but past a certain point they have enough privileges to give themselves more privileges. SELinux might be the answer, although you'd have to use it carefully if you wanted to avoid it locking puppet down as well. And if puppet isn't locked down, and they have root access... -- Bruce A problem shared brings the consolation that someone else is now feeling as miserable as you. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
