[HPADM] SUMMARY: Stop users from getting to command line

From: Ronelle Van Niekerk (rvanniek@ecgd.gov.uk)
Date: Mon Jul 08 2002 - 08:56:42 EDT


Thanks for all the responses.

I haven't quite reached a decision about what to do yet, but the
information sent me was very helpful.

A lot of people suggested I don't use a root ID user but use sudo
instead - good idea, but it's not possible at the moment.

Thanks again
Ronelle

> -----Original Message-----
> From: Ronelle Van Niekerk
> Sent: 04 July 2002 15:11
> To: HP (E-mail)
> Subject: Stop users from getting to command line
>
> OK, I've managed to make the script, that will stop the dbas from ever
> getting to the root command line, work.
>
> Now my only problem is that the X-Win32 app that we're using allows
> them to program it to execute an xterm.
> This means that all my safe guards are bypassed and the user goes
> straight to the command prompt in the xterm.
>
> Is there any way to stop this from happening?
>
> Besides configuring their X-Win32 app myself, which they will be able
> to reconfigure, I've tried using the .dtprofile DTSOURCEPROFILE
> variable but that's only effective when they're using CDE, not xterm.
>
> What I'm looking for is a was for the OS to say that this user may not
> go to the command line, the user may only use the menu script
> provided.
>
> Any ideas?
>
> -Ronelle

**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************

--
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:15 EDT