On Wed, 27 Dec 2000, Bill Lumsden wrote:
> Hi all, > I want to give members of my staff access to a program (radute)that only > runs as root. Can this be done without giving full root access ?? > > If so can someone tell me how? > > computer:/usr/local/radius#ls -la > -r-x------ 1 root staff 9105 Mar 2 2000 hsysadm > -r-x---r-x 1 root staff 8854 Mar 2 2000 hwebadm > -r-x------ 1 root staff 4819 Mar 2 2000 ison > -rw-r--r-- 1 root staff 54 Mar 2 2000 pine > -rwx------ 1 root staff 292 Mar 2 2000 rad.sh It seems that rad.sh also needs to be world/group executable (and readeble). If unsure, try to: # chmod g+rx * This will set read and execute group-permission for every file in this dir. Not only the 'startfile' needs to be user-executable, but also every file that that file executes, eg: #!/bin/sh prog1 prog2 prog3 When executing this file as a user, the files prog1-prog3 also needs to have the execution bit set for the group. Hope that helps, Sebastiaan
