restricting use of smit 2

[SSD]

i want to not to allow my users to use smit?
Any way ...any config files for that???

thnkX in advance

 

[christos]

you could clear the ODMDIR varable for the users shell, but they may set it back. If they have no/low permission they will not be able to change the system from smit anyway.
They will get permission errors if they tru to shudown or change anything.
you could alais smit in their shell to echo "disabled" or smit -X to take the teeth out of smit
there is no (allow/deny) file as such

 

[absi]

hi chris
i have heared of some configuration file which can be used
to restrict the use of smit....but i dont remember the
name of that file at this time.
Can anyone recall that??
absi

 

[aixqueen]

smitacl.user File

The /etc/security/smitacl.user file contains the ACL definitions for SMIT. This is an
ASCII file that contains a stanza for each system user. Each stanza is identified by a
user name followed by a : (colon) and contains attributes in the form Attribute=Value.
Each attribute pair ends with a newline character as does each stanza.

The file supports a default stanza. If an attribute is not defined, either the default
stanza or the default value for the attribute is used.

http://www.rs6000.ibm.com/doc_link/en_US/a_doc_lib/files/aixfiles/smitacl.user.htm

You could look at roles as well:

http://www.rs6000.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/admin_roles.htm

#-)