I have a Solaris 10 system. I would like to be able to reboot my
system. Currently, the only to do this is to first log in as root,
then, run the "reboot" command. The problem is that everyone who uses
it will know the superuser password.
How do you allow a regular user to reboot a Solaris 10 system without
being logged in as root?
> Hi,
>
> I have a Solaris 10 system. I would like to be able to reboot my
> system. Currently, the only to do this is to first log in as root,
> then, run the "reboot" command.
Read the man page for reboot. It isn't normally the right way to reboot
a system.
> The problem is that everyone who uses
> it will know the superuser password.
>
> How do you allow a regular user to reboot a Solaris 10 system without
> being logged in as root?
You should look at RBAC - possibly there's already some role defined
which allows for rebooting - or sudo.
--
Chris
How do you configure "sudo" to make this work?
How many people do you want to be able to reboot your system? The only
thing that's rebooted mine recently is earthquakes!
> How do you allow a regular user to reboot a Solaris 10 system without
> being logged in as root?
rbac.
--
Ian Collins
pkgadd -d sudo-1.8.1p2-sol10-x86-local
Now, inside /usr/local/bin directory, I see "sudo"
What do I do next to do a test "reboot" when logged in as a regular
user?
You do:
$ man sudo
$ man visudo
$ /usr/local/sbin/visudo
man sudoers
One of my most hated man pages :)
In addition to the other advice people have offered (sudo and rbac), the
obvious answer is that you don't. You probably shouldn't be using the reboot
command (read the notes at the end of the man page), and you probably
shouldn't be rebooting your system.
Unix computers should be shut down for power outages, rebooted for patches,
and otherwise left alone.
Colin