Thanks for the feed back...I will continue down the sudo path. --- John Stoffel <john@stoffel.org> wrote:
Mike> We have a set of users who need the power to Mike> stop/start their own particular service/daemon.
Mike> I've tried granting user rights directly to the init Mike> script, but that doesn't work.
Nope, this won't work at all.
Mike> I am looking into sudo, but am not sure it can be specific to Mike> only 1 service, and not all of them?
sudo will do exactly what you want, but you also need to be careful that the user(s) can't run arbitrary program from with sudo or the script(s) they are allowed to run.
For example:
sudo vi /path/to/file
is just a gaping security hole, since the user can now either push to to a sub-shell from within vi, or edit another file. Go see the docs and such on: http://www.courtesan.com/sudo/ and I really recommend that you go with this tool.
John _______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug