Re: root group in solaris

Dave Ockwell-Jenner <[email protected]> Mon, 18 Sep 2006 13:48:07 -0400
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
I don't recall a way to do what you describe. Realistically, you  
could create a whole bunch of UID=0 accounts for each user, such that  
they have their own credentials - but once they are logged in, they  
could do anything anyway (like change the password you don't want to  
give out in the first place).

Out of interest, why would you discount SUDO? In my experience, it's  
extremely simple to setup if you don't want to do anything too fancy  
and has stood the test of time.
--
Dave Ockwell-Jenner
Solar Nexus Solutions
http://www.solar-nexus.com/

On 18-Sep-06, at 8:50 AM, dubaisans dubai wrote:

> Hi,
>
> I would like to give root user privileges to a set of OS
> administrators. Everyone has individual user-ids on the system.
> Currently they login with their personal ID and then SU to root. I
> donot want to share root password with these many people.
>
> I am thinking of adding all these users to the "root" group[GID 0].
> Will it provide root-equivalent UID O access to these users. If not
> why ? Does the "root" group not have root user-id equivalent
> privileges?
>
> Is it possible manually to make the GID 0 privileges equivalant of  
> UID O?
>
> How else can I give these individual users root privileges - make all
> of them UID 0 or something.? Is that a smart idea?
>
> I am looking at something simpler than SUDO or RBAC