RE: Hearing the truth??

"Sayek, Ogan" <[email protected]> Wed, 18 Feb 2004 13:03:07 -0500
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
hi, 

There are 2 scenarios to this statement. 
1. The user kept all of his files in his home directory. In which case
userdel -r will delete user directory and all the files in it. 

2. The users are allowed to have files all over the system in which case
a simple "find / -user username -print" would reveal all the files
associated with the particular user.  And you can do rm on those files
fairly easy.

I hope this helps, and I also hope I didn't misunderstand the issue. 
Good luck, unix admins might be hard to convince sometimes :)

-------------------------------------- 
OGAN SAYEK 
Systems Engineer 
Towson University 
Computing and Network Services (CANS) 
Email: [email protected] 
Phone: 410.704.4256 



-----Original Message-----
From: OBrien, Brennan [mailto:[email protected]] 
Sent: Tuesday, February 17, 2004 8:22 PM
To: [email protected]
Subject: Hearing the truth??

All:

I've got an interesting situation at the office I could use some advice
on.  I'm being asked from a security perspective whether the following
statement (made by our Unix admins) could be considered true:

"The only way you can delete a user account on a unix environment is to
write a series of scripts to eliminate file associations."

So, while I don't disagree with the logic, is this actually the case
that there are no commercial tools available to assist in this arena,
and the only method of deleting a user on a system safely and
effectively is to write a bunch of scripts on your own?  This just begs
to be a problem solved by a commercial entity if it's actually the case.


We're in a Sun environment. Some thoughts would be appreciated. 

Brennan