Article View: comp.security.misc
Article #9Re: GNU su doesn't restrict root access? Why?
From: William L Larson
Date: Tue, 27 Oct 1992 22:37
Date: Tue, 27 Oct 1992 22:37
14 lines
1302 bytes
1302 bytes
In article <719877662snx@Nemesys.demon.co.uk> gvm@nemesys.demon.co.uk (Granville Moore) writes: > >You don't have to share the root password in order to allow more >than one person to "su root" or login as root. All you need are multiple >/etc/passwd entries with uid 0. Their activities will be indistinguishable, >once they've su'd or logged in, but this would be the case with shared >passwords anyway. > From my experience, I have kepts the GID of these "additional" root accounts to be the same as their individual GIDs. This way, they can act as root all they want/need, but the files they modify will be tagged with their GID so that I can track who did what. Not perfect, but better than nothing.
Technical Details
Message-ID:
<1992Oct27.223713.28506@cs.sandia.gov>Path:
arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!saimiri.primate.wisc.edu!uakari.primate.wisc.edu!unmvax!cs.sandia.gov!wllarsoReferences:
<1992Oct22.074152.20749@nntp.hut.fi> <719877662snx@Nemesys.demon.co.uk>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!charon.amdahl.com!pacbell.com!sgiblab!zaphod.mps.ohio-state.edu!saimiri.primate.wisc.edu!uakari.primate.wisc.edu!unmvax!cs.sandia.gov!wllarso From: wllarso@sandia.gov (William L Larson) Subject: Re: GNU su doesn't restrict root access? Why? Message-ID: <1992Oct27.223713.28506@cs.sandia.gov> Sender: usenet@cs.sandia.gov (Another name for news) Organization: Sandia National Laboratories References: <1992Oct22.074152.20749@nntp.hut.fi> <719877662snx@Nemesys.demon.co.uk> Date: Tue, 27 Oct 92 22:37:13 GMT Lines: 14