On Aug 13, 2011, at 9:38 AM, Diego Zamboni wrote:

> Hi Tom,
> 
>> 1) Are you aware of a wrapper, unique shell or simiar tool that could 
>> provide root level access at a read only level?
> 
> What comes to mind is to put the read-only functionality you want in a 
> specific program, and then give sudo access to certain people *only* to that 
> program. As long as (a big assumption!) that program only does what it's 
> meant to, and doesn't have any ways of braking out into a shell, those people 
> should only be able to have root powers as far as the functionality of the 
> program allows them.

Can you say "sudo"?

-Dan
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to