aboutsummaryrefslogtreecommitdiff
path: root/security/super/pkg-descr
diff options
context:
space:
mode:
authorJean Milanez Melo <jmelo@FreeBSD.org>2006-07-24 12:12:42 +0000
committerJean Milanez Melo <jmelo@FreeBSD.org>2006-07-24 12:12:42 +0000
commitc49ad1acca70e3d0b7037526d2231c94f263e08b (patch)
tree342e800ab11c8fe4537c558100c6576cf927c552 /security/super/pkg-descr
parent1fa810ee382e2fe7ddb5be3bb3caaa2fee1f238f (diff)
downloadports-c49ad1acca70e3d0b7037526d2231c94f263e08b.tar.gz
ports-c49ad1acca70e3d0b7037526d2231c94f263e08b.zip
Notes
Diffstat (limited to 'security/super/pkg-descr')
-rw-r--r--security/super/pkg-descr39
1 files changed, 4 insertions, 35 deletions
diff --git a/security/super/pkg-descr b/security/super/pkg-descr
index ef2e077e8f82..5eb311a32eda 100644
--- a/security/super/pkg-descr
+++ b/security/super/pkg-descr
@@ -1,4 +1,4 @@
-Super is a setuid-root program that offers
+Super is a setuid-root program that offers:
o restricted setuid-root access to executables, adjustable
on a per-program and per-user basis;
@@ -7,30 +7,8 @@ Super is a setuid-root program that offers
scripts can be run as root (or some other uid/gid), without
unduly compromising security.
-Sample uses:
- - to call a script that allows users to use mount(8) on
- cdrom's or floppy disks, but not other devices.
+The design philosophy behind super is two-fold:
- - to restrict which users, on which hosts, may execute a
- setuid-root program.
-
- - to allow groups of trusted users (e.g. an "operator" group) complete
- root access to sets of selected commands such as, say, line-printer
- control commands, without giving away access to other commands,
- and with full logging of all commands used.
-
-
-Super and sudo
---------------
-Sudo --
- Sudo allows a permitted user to execute a command as the superuser.
- Its central design philosophy is that each user can be
- trusted when executing certain commands. This is implemented
- by allowing each user to execute the restricted commands for
- which s/he is trusted, without giving access to other restricted commands.
-
-Super --
- The design philosophy behind super is two-fold:
(a) some users can be trusted when executing certain commands;
(b) there are some commands, such as a script to mount CDROM's,
which you'd like to be safely executable even by users who
@@ -39,14 +17,5 @@ Super --
can be hard to break, and super provides that wrapper so that
even a non-trusted user can use the scripts.
-In the author's view, the main differences to the administrator are:
-
- (1) the files that specify valid user/command combinations have
- a different look and feel.
-
- (2) super provides a safe wrapper for scripts, so that a
- well-written script can be run safely by ordinary
- users without having to actually trust them.
-
-
--- David (obrien@FreeBSD.org)
+WWW: http://www.ucolick.org/~will/#super
+AUTHOR: Will Deich <will@ucolick.org>