non-root ability to run /etc/rc3.d script
I need to give some developers the ability to recycle a service that
runs as root (rc3.d script for java listener > port 1024). It is
deathly important NOT to give them anything else, because they cannot
be trusted. They do stupid stuff like 'chmod -R 777' when given the
chance.
I read a chapter in "Solaris Admin Guide" by Janice Winsor on RBAC
(Role Based Access) but it seems like too much work for this one
function. So would sudo, or Symantec powerbroker. Is there any easy
way to create a solution?
Thanks
JV
__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
[788 byte] By [CodeProf.com] at [2007-12-25 1:50:00] 