Hi Bret,

Where can I find info on sudo and howto set it up?

Matt

>Matthew Simpson wrote:
>
>>  Hi All,
>>
>>  Would anyone have an setuid script that could do something similar as
>>  the following
>>
>>  The script needs to beable to do for example:
>>
>>     o only allow changes to files under /www
>>     o do a "chgrp multimedia", and "chmod g+w"
>>     o optionally do recursive changes for directories
>>     o warn if the file/directory has write permissions for 'www' and those
>>       write permissions are taken away by the 'chgrp/chmod'.
>>     o log the changes: timestamp, userid, filename and previous permissions
>>     o _not_ allow chgrp/chmod for files that are sym-linked into the /www
>>       directory, or that are inside a directory that's sym-linked into the
>>       /www directory.  This is to prevent somone creating a sym-link to,
>>       say, /etc/shadow and using the script to get read permissions.
>>
>>  This script is so that staff members don't have to have su access to
>>  be able changed permission on there files created by a root process.
>>
>>  Any help would be greatly appreciated.
>>  Please also cc replies to [EMAIL PROTECTED]
>>
>>  Matt
>>  --
>
>Matt, I don't belive that scripts can be setuid.  Look into sudo eith have
>your users that you have setup in the sudoers file run sudo "command" or
>write a wrapper that does the sudo call for them.  They will be prompted for
>their own password.
>
>And then there is cron to periodically run as root and make the changes you
>want.
>
>Bret
>
>
>
>_______________________________________________
>Redhat-list mailing list
>[EMAIL PROTECTED]
>https://listman.redhat.com/mailman/listinfo/redhat-list

-- 

--
Matthew Simpson
System Administrator
The Infoxchange, Inc.
Technology for Social Justice
Email: [EMAIL PROTECTED]
WWW: www.infoxchange.net.au
Ph: (03) 9486 9355 Fax: (03) 9486 9344
--



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to