Re: SEUL: Target user for SEUL

[Paul Anderson <paul@geeky1.ebtech.net>]

On Thu, 22 Jan 1998, George Bonser wrote:

> 
> There is sudo.  You can configure it to allow certain users to execute
> certain commands as root.  It is configurable.
> 
> 
I dunno, I think you should just drill into the user that they can't screw
their computer up if they aren't root(many newbies would find that VERY
comforting, the BIGGEST fear any newbie has is of screwing the system).
With an auto-suing daemon, you could end up with this happening:

(Newbie Thinks: Hmm, the /vmlinuz is real big, and that /dev dir has a LOT
of files in it, I should clear them out to free some disk space...(THIS
HAPPENED ONCE!  This fellow posted to a list I'm on asking which drivers
he REALLY needed, so that he could nuke the unused ones from /dev))

newbie:/% rm /vmlinuz
sudemon: WARNING!  The preceeding command requires root privileges, please 
sudemon: hold while I su to root and execute the command for you...
newbie:/% su root
Password:
# rm /vmlinuz
# exit
newbie:/%
sudemon: Have a nice day!

TTYL!


                            ---
                        Paul Anderson
		   paul @ geeky1.ebtech.net
    Author of Star Spek(a tongue in cheek pun on Star trek)
e-mail: starspek-request@lowdown.com with subscribe as the subject
I hear it's hilarious.               Maintainer of the Tips-HOWTO.
          http://www.netcom.com/~tonyh3/speck.html
  May you live in interesting times.  --Chinese curse