From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 3223 invoked by alias); 10 Jun 2004 22:11:36 -0000 Mailing-List: contact overseers-help@sources.redhat.com; run by ezmlm Precedence: bulk List-Archive: List-Post: List-Help: , Sender: overseers-owner@sources.redhat.com Received: (qmail 3203 invoked from network); 10 Jun 2004 22:11:34 -0000 Received: from unknown (HELO cgf.cx) (66.30.22.40) by sourceware.org with SMTP; 10 Jun 2004 22:11:34 -0000 Received: by cgf.cx (Postfix, from userid 201) id 34964400100; Thu, 10 Jun 2004 18:11:34 -0400 (EDT) Date: Thu, 10 Jun 2004 22:25:00 -0000 From: Christopher Faylor To: Ian Lance Taylor Cc: Jonathan Larmour , Gerald Pfeifer , overseers@sourceware.org Subject: Re: removing login rights from non-overseers Message-ID: <20040610221134.GA8941@coe.casa.cgf.cx> Mail-Followup-To: Ian Lance Taylor , Jonathan Larmour , Gerald Pfeifer , overseers@sourceware.org References: <20040609012706.GA4536@coe.casa.cgf.cx> <40C6809E.50102@eCosCentric.com> <20040609032303.GA12460@coe.casa.cgf.cx> <20040610203442.GA6939@coe.casa.cgf.cx> <40C8C897.7060703@eCosCentric.com> <40C8CF64.9060906@eCosCentric.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-SW-Source: 2004-q2/txt/msg00520.txt.bz2 On Thu, Jun 10, 2004 at 05:29:14PM -0400, Ian Lance Taylor wrote: >Jonathan Larmour writes: >> Sudo is a lot simpler but does mean many people still retain complete >> and interactive shell access. > >sudo permits restricting which commands can be executed. I don't know >whether we can realistically use that, though. As long as we set the group ownership correctly, it seems like the only thing you'd need sudo for would be cron. cgf