[EMAIL PROTECTED] wrote: > Thanks Ray, > > I think this answers my question... > > In other words if you are not root authorised at UNIX you cannot under > any circumstances be a super-user at Universe level, no matter how you > setup/install Universe since Universe uses UNIX to authenticate. > > Is that right?
Actually, it may be wrong ... > > I was thinking it might have been possible to create a different > security level (not root) that Universe could sit on thinking it was > root and therefore setting the 'super-user flag' to true and allowing > Universe admin that requires super-user access. Certainly you can't do it that way. But maybe you could run UV in a chroot jail, so some users could have "root in the jail", but not be able to impact others. There's a lot of things to think about here, though. If you have "root in the jail" I think there are ways of breaking out. And you may (or may not) have to force all UV users via the jail - I don't know whether locking would work across the jail boundary or not. It's an idea, anyway. Or switch on SELinux, so that "root" is "just another user" :-) Something to think about. > > Mike Cheers, Wol ------- u2-users mailing list [email protected] To unsubscribe please visit http://listserver.u2ug.org/
