On Sun, Sep 16, 2007 at 05:14:30PM +1000, Chris wrote: > So what's the "ideal" way to do things?
Ok, here's the scoop... there is NO single best way. There are lots of ways to solve these kinds of problems, and "ideal" changes with what the problem is. This is why people keep asking you to explain the problem more. Possible answers might be: write a special suid script and only give sudo access to that; give sudoers specs for each and every command needed; give full sudo access and imprison the user if they abuse it. There are so many more options it's not even funny, and nobody can tell which one is a good solution to your problem, since we don't know what that problem is. There's even a chance that no special sudo access is needed at all for some of the tasks. -- Darrin Chandler | Phoenix BSD User Group | MetaBUG [EMAIL PROTECTED] | http://phxbug.org/ | http://metabug.org/ http://www.stilyagin.com/ | Daemons in the Desert | Global BUG Federation
