[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: sydo (aka "users want control. tto)... epilogue...




Folks -
  I was reluctant to use sudo to solve the problem I discussed yesterday, 
about permitting a user to control print jobs without having root access,
since I felt that sudo was a hack. Perhaps at one time, sudo was a hack, 
but I downloaded anyway late yesterday and tinkered with it late last 
night.

  It seems to me that sudo is NOT a hack, and effectively solves the print 
serve problem. This is a robust and secure enough tool for this purpose. 
The configuration of sudo permits the administrator to authorize a single
source-user, target-user, executable combination, without any blanket 
permissions or gross changes in the users environment. Of course, the 
configuration can be messed up to be too permissive, but careful config-
uration an use of sudo looks like a Good Thing to me....

   Thanks to Wes for suggesting this, and to Steve Scherbinski for 
reinforcing that. I did write my own, very simple configuration file, but
the infor is welcome in any case.


                                                              Regards,
                                                              ---> RGB <---