similar to: prevent users from fiddling with network?

________________________________________ From: CentOS <centos-bounces at centos.org> on behalf of Valeri Galtsev <galtsev at kicp.uchicago.edu> Sent: Thursday, September 21, 2017 9:10 AM To: centos at centos.org Subject: [CentOS] prevent users from fiddling with network? Dear Experts, "this is system from the hell!" Than was my first reaction when I realized that logged in

On Thu, September 21, 2017 12:42 pm, Joseph L. Casale wrote: >> Than was my first reaction when I realized that logged in with GUI (X11) >> user can turn off (and on) network interfaces. Without being in sudoers >> file. > > Would not being in sudoers prevent them from pulling the cord out? The > rational for the control is well justified for users with multiple >

On Thu, September 21, 2017 12:42 pm, Joseph L. Casale wrote: >> Than was my first reaction when I realized that logged in with GUI (X11) >> user can turn off (and on) network interfaces. Without being in sudoers >> file. > > Would not being in sudoers prevent them from pulling the cord out? The > rational for the control is well justified for users with multiple >

I would like to be able to allow regular users that don't have admin privileges to be able to reboot their workstation. (they're software developers so rebooting their workstation doesn't affect anybody else) I tried changing the ownership of /sbin/reboot and /sbin/shutdown to root:users and permissions to 550, but that didn't work - it's still asking for root privileges.

On Thu, September 21, 2017 6:13 pm, Scott Robbins wrote: > On Thu, Sep 21, 2017 at 05:23:23PM -0500, Valeri Galtsev wrote: >> >> On Thu, September 21, 2017 12:42 pm, Joseph L. Casale wrote: >> >> Than was my first reaction when I realized that logged in with GUI >> (X11) >> >> Yes, I can understand the rationale as above - if it is somebody's

As Scott said, nothing is perfect. On Ubuntu (16.04 - the current long term support version) all home directories are world executable/readable ("Security? What's that?"). ----- Original Message ----- From: "Scott Robbins" <scottro11 at gmail.com> To: "centos" <centos at centos.org> Sent: Thursday, September 21, 2017 9:40:03 PM Subject: Re: [CentOS]

On Thu, October 13, 2016 11:55 am, Mike - st257 wrote: > On Thu, Oct 13, 2016 at 11:33 AM, Valeri Galtsev > <galtsev at kicp.uchicago.edu> > wrote: > >> Dear Experts, >> >> Could someone point me in the right direction: how can I disable >> hybernate/suspend in CentOS 7? >> >> I get workstations for graduate students with decent amount of RAM

Am 14.10.2016 um 10:19 schrieb Liam O'Toole <liam.p.otoole at gmail.com>: > On 2016-10-13, Valeri Galtsev > <galtsev at kicp.uchicago.edu> wrote: >> >> On Thu, October 13, 2016 11:55 am, Mike - st257 wrote: >>> On Thu, Oct 13, 2016 at 11:33 AM, Valeri Galtsev >>> <galtsev at kicp.uchicago.edu> wrote: >>> >>>

Dear Experts, Could someone point me in the right direction: how can I disable hybernate/suspend in CentOS 7? I get workstations for graduate students with decent amount of RAM (32 GB), and for machines with large RAM I either do not have swap at all of have some small (4 GB) swap. As I remember from older manuals, one has to have at least twice amount of swap compared to physical RAM for

My experience with RHEL and CentOS is quite limited, andwould classify me as novice.? I have been running CentOS 6for a little over a year and recently brought up a CentOS 7system as a virtual machine under Windows 7. One of the first things I usually do after installation isedit the /etc/sudoers file using visudo to give a specificuser or specific users privileges as indicated in the fileexcerpt

Hello, Consider two following cases: 1. On production systems on television stations, a sysadmin give teens (remaja group, age 13 and older) full administrator privileges by adding this line to sudoers: %remaja ALL=(ALL:ALL) ALL Rationale: Almost all programs on the system can only be run by teens as root. 2. On production systems on tobacco factories, a sysadmin also give adults (age 18

> On Aug 16, 2019, at 6:21 AM, Warren Young <warren at etr-usa.com> wrote: > > On Aug 15, 2019, at 11:04 PM, Bagas Sanjaya <bagasdotme at gmail.com> wrote: >> >> Based on above cases, is it OK to give group of random users full administrator privileges using sudo, by adding them to sudoers with ALL privileges? Should sudoers call customer service number instead

On Fri, 6 May 2016, Valeri Galtsev wrote: > > On Fri, May 6, 2016 1:54 pm, Jeff Layton wrote: >> Good afternoon, >> >> Apologies if this topic has come up before but I've found >> that the Firefox 45.1.0 stability to be somewhat lacking. > > <rant> > I've found that about Firefox in general some 5 years ago. Or rather > "releases"

Dear Experts, I was running ISC DHCP server for longer than I would care to remember. Now I decided to climb out of the cave and configure failover set (primary-secondary), and I seem to hit brick wall, which I need help with. I only need IP v4, no v6, which may simplify things. Could someone point to a description of working DHCP failover configuration? I do not want to make two independent

On Wed, May 6, 2015 9:28 am, lhecking at users.sourceforge.net wrote: > >> And I, personally, would want an email from aforesaid manager telling me >> not to do any upgrades, which I would print out in several copies and >> put >> in a secure place.... >> <snip> > > You do not understand the situation I presented. This is about avoiding > a

On Fri, December 18, 2015 10:27 am, Jonathan Billings wrote: > On Fri, Dec 18, 2015 at 09:55:39AM -0600, Valeri Galtsev wrote: >> <sarcasm> >> I guess we all are divided into two categories >> >> 1. If google [something] doesn't work on the operating system of my >> choice, the hell with that crap (and google itself). >> >> 2. If google

On 07/18/2018 04:05 PM, Valeri Galtsev wrote: > > > On 07/18/18 14:36, Johnny Hughes wrote: >> On 07/18/2018 01:58 PM, Valeri Galtsev wrote: >> >> >> <snip> >> >>>> But are you guys really telling you think the calendaring / scheduling >>>> for individual users and the main corporate account, etc. .. are >>>>

On 02/02/2016 03:50 PM, Lamar Owen wrote: > On 02/02/2016 09:28 AM, Jonathan Billings wrote: >> CentOS is not a bleeding-edge distribution that constantly keeps >> packages up to date with the upstream projects. If you want that, try >> another distribution like Fedora. > <rant> > GNOME can get a rebase to a newer version, but KDE can't..... this > from a

On Friday 31 August 2018 15:44:53 Valeri Galtsev wrote: > > I would use FreeBSD (and I do use FreeBSD for bacula, now bareos backup > server and storage hosts), it has really small "footprint", and it is > quite widespread. > > Incidentally, I was using bacula for very long time, but recently I > switched to bacula's fork: bareos. You may want to consider the

--On Friday, January 27, 2017 11:11 AM -0600 Valeri Galtsev <galtsev at kicp.uchicago.edu> wrote: > <rant> > Even with having to notify users/schedule reboots as rarely as once every > 54 days on average, this is really PITA, because it is often. That, BTW is > why we fled our servers away from Linux ;-( > </rant> Towards what? What other system has few updates