Re: [ILUG] Sudo Help

From: Thomas Bridge (thomas at domain medianet.ie)
Date: Tue 26 Oct 1999 - 13:36:48 IST


On Tue, 26 Oct 1999, Dave Burke wrote:

> [root at domain hoth /root]# cat /usr/local/bin/sudo-passwd
> #!/bin/sh
>
> if [ "$1" = root ]; then
> echo "WARNING"
> exit
> fi
>
> passwd $1
  
> I'm just not happy with this script, It all looks too simple and I've a
> feeling I've done something inherently wrong. Is there anything else that
> I should be looking to check?

Do it on the group ID of the user - is the user in one of a predefined
list of users?

Now that you mention it, I have such a script I wrote for a friend who is
a sysadmin in UCD. Its main assumption is that the "ordinary" users are
all in one of a (smallish) number of groups. It almost certainly won't
work under RedHat due to RH's sucky way of implementing groups, but on
more traditional machines it should be fine.

Talk to me if you want the script.

T.

-- 
Thomas Bridge		Senior Hostmaster/Sysadmin, VIA NET.WORKS Ireland.
thomas.bridge at domain via-net-works.ie
"Some people have told me they don't think a fat penguin really embodies
the grace of Linux, which just tells me they have never seen a angry
penguin charging at them in excess of 100mph. They'd be a lot more
careful about what they say if they had." - Linus Torvalds


This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:04:47 GMT