Non root user to View \etc\shadow

dhammika · 04-05-2006, 06:44 AM

Hi

Question is how to give authority to view copy \etc\shadow file. I create user with userconf and give each and every authority but still unable to view \etc\shadow

Any one ??

Simon Bridge · 04-05-2006, 07:05 AM

You absolutley do not want to do this.

If you have more than one administrator, but do not want them to have superuser acces to everything, then you need sudo. Set the user in sudoers so that they have su access for viewing the /etc/shadow file and nothing else.

Code:

[~]$ less /etc/shadow
/etc/shadow: Permission denied
[~]$ sudo less /etc/shadow
Password:
[less output deleted]
[~]$

dhammika · 04-05-2006, 08:05 AM

thanks simon it works fine ...

Simon Bridge · 04-05-2006, 11:06 PM

no problem.

remember: the fewer admins you have the better the security (and more work for the few admins of course). You absolutely want to restruct access to the passwords files.