John Sonnenschein wrote: > Hey security people > > I'm fishing for feedback on something. A user can't change his or her > own shell in [Open]Solaris. > > What's everyone's thoughts on this approach to a solution to that: > > suid binary in /usr/bin: > - allows users to change their own shell > - via RBAC allows users with the solaris.admin.usermgr.write privilege > to change anyone's shell > > I have some code that works here: http://cr.opensolaris.org/~error404/chsh/ > > I'm wondering about delivering to ON... good idea? bad idea?
1226020 *other* RFE: add chfn & chsh commands to Solaris 2 submit alan.coopersmith 1995-10-25 I still think it's a good idea, so +1 from me. -- -Alan Coopersmith- alan.coopersmith at sun.com Sun Microsystems, Inc. - X Window System Engineering