Re: root group in solaris

That's probably not the best way to do it. First, just by adding
people to the root group it doesn't give them root privileges. The
only way to do that would be to make specific binaries sgid/suid.

You should really look at using RBAC or sudo for what you're doing.

With RBAC a user will su to a "role" (a special account) that can (or
may not) have a shared password. That role will have a profile that
will link what binaries can be run suid by that role. Those users will
not have root, they'll just have access to an alternate account that
they have to su to (good for auditing/paper trails.)

On 9/18/06, dubaisans dubai <dubaisans@gmail.com> wrote:
>  Hi,
>
> I would like to give root user privileges to a set of OS
> administrators. Everyone has individual user-ids on the system.
> Currently they login with their personal ID and then SU to root. I
> donot want to share root password with these many people.
>
> I am thinking of adding all these users to the "root" group[GID 0].
> Will it provide root-equivalent UID O access to these users. If not
> why ? Does the "root" group not have root user-id equivalent
> privileges?
>
> Is it possible manually to make the GID 0 privileges equivalant of UID O?
>
> How else can I give these individual users root privileges - make all
> of them UID 0 or something.? Is that a smart idea?
>
> I am looking at something simpler than SUDO or RBAC