1 |
On Sat, 12 Nov 2011 01:45:23 +0100, Florian Philipp wrote: |
2 |
|
3 |
> > What happens when there is that one thing they need to do that needs |
4 |
> > root privileges? Do you give them the root password and let them do |
5 |
> > what they want, or do you make that one operation available to them? |
6 |
|
7 |
> SETUID bit like /bin/ping or sudo itself? That being said, I'd also use |
8 |
> sudo unless the usage is so frequent that the constant password typing |
9 |
> becomes a pain. |
10 |
|
11 |
SETUID enables it for everyone, not just the user in question. |
12 |
|
13 |
You can set sudo to allow specified commands to be executed without a |
14 |
password. |
15 |
|
16 |
|
17 |
-- |
18 |
Neil Bothwick |
19 |
|
20 |
Everything should be made as simple as possible, but no simpler. |