Hello,
I would like to create accounts for myself and other sysadmins on our Sun Systems that are equal to root.
We have several sysamins in our shop and would like for security reasons to track who is doing what. The problem is that if more than one person has access to root then when root does something you don't know who was behind that root. We wish to create accounts such as aroot, broot, so on as assign that account to be accessed by only one admin. Those accounts must have full root access. I'm sure RBAC can do this but I'm not sure how to do it. I have determined how to make root a role and can then prevent people from becoming root but the rest is a mystery. I do need to use the command line to do this as several of our systems are V100s and do not have graphic cards to access SMC.
Thank you
Thomas Gossard
I would like to create accounts for myself and other sysadmins on our Sun Systems that are equal to root.
We have several sysamins in our shop and would like for security reasons to track who is doing what. The problem is that if more than one person has access to root then when root does something you don't know who was behind that root. We wish to create accounts such as aroot, broot, so on as assign that account to be accessed by only one admin. Those accounts must have full root access. I'm sure RBAC can do this but I'm not sure how to do it. I have determined how to make root a role and can then prevent people from becoming root but the rest is a mystery. I do need to use the command line to do this as several of our systems are V100s and do not have graphic cards to access SMC.
Thank you
Thomas Gossard