Gary Winiger wrote:
>> suid binary in /usr/bin:
>>     
>
>   
>> - allows users to change their own shell
>> - via RBAC allows users with the solaris.admin.usermgr.write privilege 
>> to change anyone's shell
>>     
>
>       Kind of like chfn and chsh.  Which IIRC were just links to passwd.
>       Why do we need an authorization to change our own shell?
>
> Gary..
>   
you shouldn't need an authorization to change your own shell, that's the 
point. the auth idea was such that you can change other peoples' shells 
without usermod ( for example tech support people that get a 'change my 
shell' ticket, easier than bouncing it back to the user )

Reply via email to