On Thursday 29 May 2003 04:00, Derek Fountain wrote:
For the time being I have added sudo /sbin/ifdown eth0 to each $HOME/.bashrc per the suggestion from Basil Fowler, but how long will it take them to learn enough linux to know they can edit that file without root permission?
It does not matter if the .bashrc file is editable. The alias in the .bashrc file is just for convenience. The .bashrc file concerned is the one in YOUR private $HOME directory, which should be readable only by yourself. The point of sudo is to give a specified ordinary user limited rights to execute a specific program that requires root access. The rights are set out in the /etc/sudoers file, which should be readable only by root, The rights are NOT in the .bashrc file. sudo normally requires the authorised user to enter his/her personal password before the program is run. So if you keep your personal and root password to yourself, others will not be able to run the ifdown or ifup commands. Hope this helps Basil Fowler
Well that one's easy - set the .bashrc files to be owned by root and ensure they aren't other-writable.
-- "...our desktop is falling behind stability-wise and feature wise to KDE ...when I went to Mexico in December to the facility where we launched gnome, they had all switched to KDE3." - Miguel de Icaza, March 2003
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com