John Sonnenschein wrote:
> Hey security people
> 
> I'm fishing for feedback on something. A user can't change his or her 
> own shell in [Open]Solaris.
> 
> What's everyone's thoughts on this approach to a solution to that:
> 
> suid binary in /usr/bin:
> - allows users to change their own shell
> - via RBAC allows users with the solaris.admin.usermgr.write privilege 
> to change anyone's shell
> 
> I have some code that works here: http://cr.opensolaris.org/~error404/chsh/
> 
> I'm wondering about delivering to ON... good idea? bad idea?

1226020 *other* RFE: add chfn & chsh commands to Solaris 2
submit          alan.coopersmith        1995-10-25

I still think it's a good idea, so +1 from me.

-- 
        -Alan Coopersmith-           alan.coopersmith at sun.com
         Sun Microsystems, Inc. - X Window System Engineering


Reply via email to