Restricting users from certain privileges

2012-04-28 Thread Zenny
Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I meant is I want to create a NanoBSD image in which there will be an additional user, say 'admin'. I need to give this new user (admin) some privileges to

Re: Restricting users from certain privileges

2012-04-28 Thread Daniel Braniss
Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I meant is I want to create a NanoBSD image in which there will be an additional user, say 'admin'. I need to give this new user (admin) some

Re: Restricting users from certain privileges

2012-04-28 Thread Zenny
On Sat, Apr 28, 2012 at 9:38 AM, Daniel Braniss da...@cs.huji.ac.il wrote: Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I meant is I want to create a NanoBSD image in which there will be

Re: Restricting users from certain privileges

2012-04-28 Thread Václav Zeman
On 04/28/2012 09:50 AM, Zenny wrote: On Sat, Apr 28, 2012 at 9:38 AM, Daniel Braniss da...@cs.huji.ac.il wrote: Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I meant is I want to create a NanoBSD

Re: Restricting users from certain privileges

2012-04-28 Thread Dimitry Andric
On 2012-04-28 09:50, Zenny wrote: On Sat, Apr 28, 2012 at 9:38 AM, Daniel Braniss da...@cs.huji.ac.il wrote: ... try sudo from ports, security/sudo Thanks Daniel, but sudo gives all (not selective) root privileges to the user (admin in my case). This isn't true. With sudo, you can give

Re: Restricting users from certain privileges

2012-04-28 Thread Eugene Grosbein
28.04.2012 14:50, Zenny пишет: try sudo from ports, security/sudo cheers, danny Thanks Daniel, but sudo gives all (not selective) root privileges to the user (admin in my case). So this is not what I am trying to achieve in my original post. Please do study sudo real power :-) It

Re: Restricting users from certain privileges

2012-04-28 Thread Konstantin Belousov
On Sat, Apr 28, 2012 at 11:29:58AM +0200, Dimitry Andric wrote: On 2012-04-28 09:50, Zenny wrote: On Sat, Apr 28, 2012 at 9:38 AM, Daniel Braniss da...@cs.huji.ac.il wrote: ... try sudo from ports, security/sudo Thanks Daniel, but sudo gives all (not selective) root privileges to the

Re: Restricting users from certain privileges

2012-04-28 Thread Patrick M. Hausen
Hi, all, Am 28.04.2012 um 11:39 schrieb Eugene Grosbein: 28.04.2012 14:50, Zenny пишет: try sudo from ports, security/sudo cheers, danny Thanks Daniel, but sudo gives all (not selective) root privileges to the user (admin in my case). So this is not what I am trying to

Re: Restricting users from certain privileges

2012-04-28 Thread Lars Engels
On Sat, Apr 28, 2012 at 11:47:07AM +0200, Patrick M. Hausen wrote: Hi, all, Am 28.04.2012 um 11:39 schrieb Eugene Grosbein: 28.04.2012 14:50, Zenny ??: try sudo from ports, security/sudo cheers, danny Thanks Daniel, but sudo gives all (not selective) root

Re: Restricting users from certain privileges

2012-04-28 Thread Torfinn Ingolfsen
On Sat, 28 Apr 2012 09:50:30 +0200 Zenny garbytr...@gmail.com wrote: Thanks Daniel, but sudo gives all (not selective) root privileges to the user (admin in my case). So this is not what I am trying to achieve in my original post. FWIW, sudo can be configured to allow only some commands. HTH

Re: Restricting users from certain privileges

2012-04-28 Thread Kurt Jaeger
Hi! Please do study sudo real power :-) It can give selective privileges per-command, [...] Just make sure none of the permitted commands has got the feature of starting a shell ;-)) Right, think of vi(1), less(1), et al. Even this aspect is taken care of with sudo (at least to a

Re: Restricting users from certain privileges

2012-04-28 Thread Stephen Montgomery-Smith
On 04/28/2012 02:50 AM, Zenny wrote: On Sat, Apr 28, 2012 at 9:38 AM, Daniel Branissda...@cs.huji.ac.il wrote: Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I meant is I want to create a NanoBSD

Re: Restricting users from certain privileges

2012-04-28 Thread Freddie Cash
On Apr 28, 2012 12:50 AM, Zenny garbytr...@gmail.com wrote: On Sat, Apr 28, 2012 at 9:38 AM, Daniel Braniss da...@cs.huji.ac.il wrote: Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I

Re: Restricting users from certain privileges

2012-04-28 Thread Jason Hellenthal
On Sat, Apr 28, 2012 at 08:04:31PM +0200, Kurt Jaeger wrote: Hi! Please do study sudo real power :-) It can give selective privileges per-command, [...] Just make sure none of the permitted commands has got the feature of starting a shell ;-)) Right, think of vi(1),

Re: Restricting users from certain privileges

2012-04-28 Thread Freddie Cash
On Apr 28, 2012 4:03 PM, Jason Hellenthal jhellent...@dataix.net wrote: cp /usr/bin/vi ~/ or upload your own... sudo $HOME/vi If your Cmnd_Alias includes the full path to vi, then your last command won't work. ___ freebsd-stable@freebsd.org

Re: Restricting users from certain privileges

2012-04-28 Thread Jason Hellenthal
On Sat, Apr 28, 2012 at 04:34:34PM -0700, Freddie Cash wrote: On Apr 28, 2012 4:03 PM, Jason Hellenthal jhellent...@dataix.net wrote: cp /usr/bin/vi ~/ or upload your own... sudo $HOME/vi If your Cmnd_Alias includes the full path to vi, then your last command won't work. I