| |||||||||||||
usermod as non-root userusermod as non-root userPosted Dec 11, 2008 6:42 UTC (Thu) by dlang (✭ supporter ✭, #313)In reply to: usermod as non-root user by wtogami Parent article: Fedora and CAPP
it could also be argued that running the command as a non-root user (especially with no parameters) is not really an attempt to change anything and so doesn't need to be audited.
_many_ *nix tools can be used by both privileged and non-privileged users. the non-privileged users can do the read functionality of the command, but write commands will fail.
(Log in to post comments)
usermod as non-root user Posted Dec 11, 2008 13:13 UTC (Thu) by epa (subscriber, #39769) [Link]
In order to satisfy the religious edicts from CAPP, the tool could be split into usermod-real, which is the real usermod program, and usermod, which is just a shell script wrapper. The script would understand --help and --version but not much else, and would not invoke usermod-real unless running as root. That would comply with the letter and spirit of the law while not breaking the existing interface.
|
|||||||||||||