|
 |
On Tue, 17 Nov 2009 21:39:33 -0300, Nicolas Alvarez wrote:
> Warp wrote:
>> Darren New <dne### [at] san rrcom> wrote:
>>> Which doesn't happen with sudo, since there's only one privileged
>>> account.
>>
>> Actually you can create different accounts in unix, which may belong
>> to
>> different groups which have different access privileges, and then you
>> can use sudo to perform a command with the privileges of any of those
>> accounts (not just the root account).
>>
>> (Granted, I don't know if graphical sudos allow you to do this in any
>> system, but at least the command-line version does.)
>
> And there's even something called "PolicyKit" that lets you elevate
> enough privileges to execute one particular operation, instead of
> getting full- blown root access.
Yes, as well as things like SELinux and AppArmor which provide MAC.
Jim
Post a reply to this message
|
|
