[rsbac] su utility that supports a separate password file

Rob See rob at rsee.net
Tue Aug 3 16:20:00 CEST 2004


Hi,

	Does anyone know of a su like utility that can be configured to use a 
different password file than the one the system uses ? My idea is to 
deny all other setuid access to secoff except for this utility which 
can store its password in a file controlled by secoff (so that root 
can't just change the password to get access) I've done a bit of 
searching, and the only things that have come close are from either 
1990 or 1996, and they don't cleanly compile on Linux.

Thanks,
-Rob
------------------------------------------------------------------
Rob See
Systems Administrator
Systems Management and Operations
University at Albany
------------------------------------------------------------------



More information about the rsbac mailing list