Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 0 down vote favorite

I'd like a user who is capable of managing the files of other users, but still must run sudo to access those files and functions outside of a /home/directory. Is such a user/group already defined in the unix/centos infrastructures? If not, what's a good way to acheive this?

share|improve this question
Right now I'm looking at setting chmod -R g+rwx admin to all standard home directories and running usermod -g admin deploy. – Chris Keele Jul 9 '12 at 21:07

1 Answer

up vote 1 down vote accepted

SELinux will allow you to do this. Create a role that has access to all home files and then assign this role to a user of your choice.

EDIT:

IBM developerWorks: "Role-based access control in SELinux"

RHEL 5 Deployment Guide: "Chapter 4. Security and SELinux"

SELinux Mandatory Access Control: "SELinux Lockdown Part Six: Customized SELinux Roles"

share|improve this answer
It sure seems like you could expand on this answer a lot more. At least provide links to some relevant documentation or some page/blog with a somewhat useful example. – Zoredache Jul 9 '12 at 22:59
@Zoredache: Done. – Ignacio Vazquez-Abrams Jul 10 '12 at 0:53

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.