Newsgroups: comp.os.linux.announce
From: jfritz@rdrc.rpi.edu <jochen.fritz@usenet.rpi.edu>
Subject: Doas avaiable
Message-ID: <1993Feb15.062406.26650@tc.cornell.edu>
Date: Mon, 15 Feb 1993 06:24:06 GMT
Approved: linux-announce@tc.cornell.edu (Matt Welsh)

The first alpha release of doas is available on tsx-11.mit.edu as 
/pub/linux/sources/usr.bin/doas0.0A1.tar.Z.  This is a source only
release.  The first real release will have binaries

Doas is a utility which allows one user to permit another user to run
specific commands under the first's user ID.  This can be used to
permit (limited) root access to other users, to provide access to
accounts without signon (eg bin, daemon, etc) without giving root
access to those who need to manage these accounts.  It is also useful
as a controlled front end for setuid shell scripts.  For every
command, an access control list is specified indicating which users or
groups are or are not allowed to use the command.

Included in the package are a number of tools to restrict the
environment, which are useful in bootstrapping a setuid program.  

Doas should be portable to any system with the BSDish setreuid system
call.  It was written under linux (by my), and has been used only
there, since that is the only box i am root on.

Instalation is:
% make
% su
# make install
# exit

Warnings: This is an ALPHA release.  This package must be installed
setuid root to be useful.  If there are bugs, they could potentially
allow anyone oon the system to gain root.  If a user creates an
incorrect configuration file s/he can give away unlimited acccess to
(only) his/her account (this is a design feature, if this is
not compatable with your site's policies, do not install doas).


-- 

-joe      (jfritz@rdrc.rpi.edu)

-- 
Send submissions for comp.os.linux.announce to: linux-announce@tc.cornell.edu
