[suse-sles-e] sudo and sux (controlling users)

From: Greg Byrd (gbyrd_at_yahoo.com)
Date: Mon Jul 02 2007 - 18:28:09 CEST


Date: Mon, 2 Jul 2007 09:28:09 -0700 (PDT)
From: Greg Byrd <gbyrd@yahoo.com>
Message-ID: <836715.6934.qm@web39615.mail.mud.yahoo.com>
Subject: [suse-sles-e] sudo and sux (controlling users)

Everyone,

Our oracle DBAs requested sux to be added to our sudo
configuration. DBAs and sys admins in our company
have a separation of duties, so SAs are not to make
oracle changes, and DBAs are not to make O/S changes.

With this in mind, in auditing logs I'm finding that
the DBAs are applying O/S patches using sux. Is there
a way I can control their access once they use sudo to
launch sux? Or is my only option to remove their
access to sux via sudo (they do not know the root
password)?

I suspect I know the answer but I wanted to ask others
to get their input.

Thanks in advance,
Greg

       
____________________________________________________________________________________
Looking for a deal? Find great prices on flights and hotels with Yahoo! FareChase.
http://farechase.yahoo.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
For additional commands, e-mail: suse-sles-e-help@suse.com



This archive was generated by hypermail 2.1.7 : Mon Jul 02 2007 - 20:32:10 CEST