Re: [gentoo-security] Prevent users to login directly

[Robert Ullrich]

On Wed, 28 Jul 2004 16:13:36 +1000
Andrew Ross <aross@×××××××××××.au> wrote:

> On Wed, 2004-07-28 at 15:29, Robert Ullrich wrote:
> > On Tue, 27 Jul 2004 18:44:26 -0500
> > Michael Ihde <ihde@××××.edu> wrote:
> >
> > > Why not use sudo?  Then you can just
> > >
> > >     # sudo <command_to_run>
> > >
> > > in your case
> > >
> > >     # sudo emerge system
> > >
> >
> > The regular user (like "rob") has to be in the group "portage" to emerge things. But I
> > won't put any user in that group. The user-account "emerge" is for administrating the
> > local software so any admin who knows about that account should be able to emerge.
> > But I don't want that admin to login anonymously with "emerge". He should be named
> > first and then (only) su-ing to "emerge" instead.
> >
> > > If you don't want to run emerge as root, then you can change the sudoers
> > > file to have it run under your "emerge" user.  Finally, to disable
> > > logins put an asterix in the second field of the shadow file for the
> > > emerge user.  Then no one can login as there is no password and only
> > > root can su to the "emerge" user.
> >
> > Not everybody knows the root-password ;-)
>
> That's the point of sudo - they don't _need_ to know the root password.
> Users x, y and z can all run emerge using their own password, which is a
> (default) option in sudoers.

I know that. If it is that easy, I wouldn't post here.
The point is: I won't let every user emerge. Only "root" and "emerge" should be allowed
to do so. For that reason I created that account which every admin knows (instead of
the root-password). So he could emerge without becoming root.
But I want him to be identified before emerging. So he _must_ login as himself first and
su - emerge after.

regards - Rob

--
gentoo-security@g.o mailing list