Re: User?s and Shells

From: Christian Hammers (ch@westend.com)
Date: 12/21/02

  • Next message: Cameron Simpson: "Re: User?s and Shells" 
    Date: Sat, 21 Dec 2002 00:01:03 +0100
From: Christian Hammers <ch@westend.com>
To: Brian Hatch <focus-linux@ifokr.org>

    On Fri, Dec 20, 2002 at 02:16:18PM -0800, Brian Hatch wrote:
    > > * But, on the other hand, I can have a
    > > su news -c /usr/local/script_running_as_user_news.sh
    >
    > How do you want to disable that? Only root can run su as another
    > user if the password is locked.

    Misunderstanding: If you set the shell to /bin/false or similar, then
    I tought that even root cannot use the command above as it would fail
    with: "No shell". But there's a "--shell" parameter for su...

    bye,

    -christian-

    Relevant Pages

    • Re: System-users and-groups?
      ... bin shouldn't do so much. ... was root and bin... ... Although the daemon user/group are ... as that user runs that command. ...
      (alt.linux)
    • RE: remote ssh for root
      ... forced-commands-only option set, you have to have the command option set. ... execution as root. ... > This message contains confidential information and is ...
      (SSH)
    • Re: grub menu oddity
      ... >>> command (until the manual root command was executed). ... >>> When I first encountered this behavior, it took several reboots for me to ... FWIW - a new CMOS battery is only $3-5 at your local Shaque du Radio ...
      (comp.os.linux.setup)
    • Re: [PHP] strange errors from command line vs. web
      ... standard php. ... > can't run the script from the command line even when I su to root. ... >>> I have some code that makes a connection to the db. ...
      (php.general)
    • Re: SU privileges
      ... If you know a userid you want to limit the ability to su too (like root), ... Another way would be to set an ACL on the su command. ... If you have received this electronic transmission in error, please notify the sender immediately by a "reply to sender only" message and destroy all electronic and hard copies of the communication, including attachments. ...
      (AIX-L)