home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.unix.admin
- Path: sparky!uunet!sci34hub!gary
- From: gary@sci34hub.sci.com (Gary Heston)
- Subject: Re: Prevent user from editing /etc/passwd
- Message-ID: <1992Sep1.165807.8644@sci34hub.sci.com>
- Reply-To: gary@sci34hub.sci.com (Gary Heston)
- Organization: SCI Systems, Inc., Huntsville, Al.
- References: <1992Aug17.131329.22491@cpp.ob.open.de> <BtAF2E.G33@ux1.cso.uiuc.edu>
- Date: Tue, 1 Sep 1992 16:58:07 GMT
- Lines: 30
-
- In article <BtAF2E.G33@ux1.cso.uiuc.edu> treincke@ux1.cso.uiuc.edu (Tim Reincke) writes:
- |schweik@cpp.ob.open.de (Martin Schweikert) writes:
-
- |>I have a user on my SVR3 machine who knows - and must know :-( - the
- |>root password.
- ^^^^^^^^^^^^^
- ^^^^^^^
- Note this comment in the original posting -----------^
-
- |If I were you and had an unauthorized user who knew the root password, I would
- |change the root password and send the user a strong warning against such
- |activity. If the user knew the root password and was messing around with
- |important system files (like /etc/passwd), I would suspend his account, no
- |questions asked.
-
- Obviously, the user is authorized, but apparently not trustworthy. Further,
- it's necessary for some reason to give this user access (I'd prefer that
- a few people around here didn't know a couple of passwords, but I work for
- them...) and Martin wishes to minimize potential damage.
-
- Think before you flame; we don't know the entire situation. Better to
- answer the question he ask, instead of one he didn't.
-
- I emailed him a suggestion, of course.
-
- --
- Gary Heston SCI Systems, Inc. gary@sci34hub.sci.com site admin
- The Chairman of the Board and the CFO speak for SCI. I'm neither.
- The most dangerous person in the world is Jessica Fletcher.
- Everywhere she goes, people die.
-