Re: root group in solaris
[email protected] Mon, 18 Sep 2006 20:07:03 +0200
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Message-ID | <[email protected]> |
>I would like to give root user privileges to a set of OS >administrators. Everyone has individual user-ids on the system. >Currently they login with their personal ID and then SU to root. I >donot want to share root password with these many people. > >I am thinking of adding all these users to the "root" group[GID 0]. >Will it provide root-equivalent UID O access to these users. If not >why ? Does the "root" group not have root user-id equivalent >privileges? >Is it possible manually to make the GID 0 privileges equivalant of UID O? No; you could have easily tested this but it has no effect at all. >How else can I give these individual users root privileges - make all >of them UID 0 or something.? Is that a smart idea? > >I am looking at something simpler than SUDO or RBAC Even simpler? I would still strongly suggest RBAC or sudo as both all your system administrators to execute programs with appropriate privileges when needed. Giving them "root privileges all the time" is a bad idea; it means that they can no longer safely use their user accounts for email, web browsing or anything else. Casper