[net.unix-wizards] setuid program

slesh@fth-1.arpa (01/23/86)

     Greetings from the neophyte Unix systems administrators at Fort 
Huachuca!!

     Our users are beginning to employ SCCS and are demanding (amoung 
many other capabilities) an SCCS "setuid" program to help them control 
access to their files.  We have developed a couple of elementary 
programs for this purpose but neither of them are neat, slick or 
elegant.   

HOW YOU CAN HELP:
     Clever people that we are, we believe that we are not the first 
systems administrators faced with this requirement.  We think there is 
a very good chance that somebody out there in 'netland' DOES have 
something that is neat, slick and elegant; that furthermore that 
benefactor has placed this program in the public domain; and that 
almost everybody else in Unix-land knows what it is called; and 
finally that somebody wouldn't mind telling us its name.

DEFINITIONS:
"neat, slick and elegant" - a table-driven program which permits 
selected update priviledges for different users.  A program easily 
maintained and easily changed for the very few user requirements not 
already anticipated.

gwyn@BRL.ARPA (VLD/VMB) (01/23/86)

SCCS, at least the SVR2 version, already supports set-UID interfaces
and access control (admin -a option).  All you need then is a set-UID
front-end that checks for fraudulent use, then feeds the command to
the regular SCCS utility.  I have one that I have not been able to
test due to our kernels not supporting System V setuid semantics.
If you really want to try it, send me mail.

jsdy@hadron.UUCP (Joseph S. D. Yao) (01/26/86)

In article <1839@brl-tgr.ARPA> slesh@fth-1.arpa writes:
>     Our users are beginning to employ SCCS and are demanding (amoung 
>many other capabilities) an SCCS "setuid" program to help them control 
>access to their files.

SCCS has "always" (since PWB System I, SCCS Version 4.0) had the
abillity to put access lists (and refuse lists) in s-files.  See
man 1 admin, because I don't often use it.  It does somewhat
depend on making files iand directories accessible and trusting
users.
-- 

	Joe Yao		hadron!jsdy@seismo.{CSS.GOV,ARPA,UUCP}