Allow Users to bring ifup and ifdown ?
Hello,
I am not new to linux. Been using since 1994. Security is the MAIN reason that I use linux. I have not had a Windows box on the internet in more than 8 years.
I have searched high and low for an answer to this. Have recently installed Mandrake 10, Whirebox Linux, and Libranet. Had the same problem with each.
And before we start. I DO NOT consider it secure to give users SU permissions or the root password. That is just plain stupid from a security point of view. I DO NOT consider it secure to have an ALWAYS ON internet connection. (Conneting at bootup is not an option) I could chmod the files, to execute for anybody, this is not a wise move either.
It seems that up until Redhat 8 or so, ir was easy enough to give users access to ifup/ ifdown to open and close the eth0 device in the /etc/network/*scripts.
The list of things I dont think are secure, are the only responses I seem to get concerning this issue.
Does someone have an idea of how to allow users to bring the internet connection up and down on newer distrobutions, or am I relegated to going back to Redhat 7.2 or similar distros ?
Seems to me, that some of these latest so called "secure linux distros", want users to leave the doorways open to intrusion and spying. Kind of like MicroCrap.
Any intelligent responses? And yeah, I have RTFM, and searched the internet. Posting here is my last resort.
|