Partial Summary: can't do "sudo -s" on hardened box

From: Gold Sun (goldsun8@yahoo.com.sg)
Date: Thu Apr 14 2005 - 23:39:19 EDT

• Next message: Solaris Admin: "can not mount root slice in single user mode"
• Previous message: Anatoliy Lisovskiy: "Slow TMPFS on Solaris 10"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi All,
 
The problem is my colleague's id on the same server
is OK (ie he could do 'sudo -s').
 
Yes, /usr/bin/ksh is in /etc/shells :
# more shells
/bin/sh
/bin/csh
/bin/ksh
/usr/bin/sh
/usr/bin/csh
/usr/bin/ksh
/bin/false
/sbin/sh
/usr/local/bin/bash

I've also tried Frank's suggestion in /etc/sudoers :
root ALL=(ALL) ALL
9gohpo ALL=(ALL) ALL
%smcadmin ALL=ALL
%helpdesk ALL=ALL, !SHELLS

but I'm still getting the message :
Sorry, user 9gohpo is not allowed to execute '/usr/bin/ksh' as
 root on sp01qtt02ist5s5
when doing 'sudo -s'
 
Is there some daemon that I must restart for it to take
effect? I've placed my id under both smcadmin &
helpdesk groups in /etc/group
 
 
Thanks
G Sun

=========================
is /usr/bin/ksh in /etc/shells?

Could be something as silly as that.

-Sal

 Yahoo! Mobile
- Download the latest ringtones, games, and more!
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

• Next message: Solaris Admin: "can not mount root slice in single user mode"
• Previous message: Anatoliy Lisovskiy: "Slow TMPFS on Solaris 10"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:30:32 EDT