Re: root group in solaris

[email protected] Mon, 18 Sep 2006 20:07:03 +0200
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
>I would like to give root user privileges to a set of OS
>administrators. Everyone has individual user-ids on the system.
>Currently they login with their personal ID and then SU to root. I
>donot want to share root password with these many people.
>
>I am thinking of adding all these users to the "root" group[GID 0].
>Will it provide root-equivalent UID O access to these users. If not
>why ? Does the "root" group not have root user-id equivalent
>privileges?


>Is it possible manually to make the GID 0 privileges equivalant of UID O?

No; you could have easily tested this but it has no effect at all.

>How else can I give these individual users root privileges - make all
>of them UID 0 or something.? Is that a smart idea?
>
>I am looking at something simpler than SUDO or RBAC

Even simpler?

I would still strongly suggest RBAC or sudo as both all your system
administrators to execute programs with appropriate privileges when
needed.  Giving them "root privileges all the time" is a bad idea;
it means that they can no longer safely use their user accounts
for email, web browsing or anything else.

Casper