[comp.sys.sun] Preventing su on personal workstations?

Holbrook.OsbuSouth@xerox.com (01/05/89)

We have a net with a number of personal workstations in people's offices,
a few common lab workstations, and two servers.  All machines are Sun-4s
running OS 4.0.

Because these are personal workstations, each person who owns a machine
has a root password for their own machine.  We have separate passwords for
the servers and lab machines that are known to our adminstrators.  The lab
machines and servers have /.rhosts files that allow them to get root
access to each other, but none of the personal workstations are in the
/.rhosts on the servers.

We have two file servers that all these machines share.  Each personal
workstation has a local disk, but all of the home directories on on the
file servers.  We use automounting to access mount the servers as needed.
We run a single yellow pages domain.

Here's the problem: each person can su to root own their own machine, but
they can't get to anyone else's files because they are root and NFS
doesn't give them full access.  However, if they then su to any other
person's account, they then have access full access to that person's files
on the server.

I'm rather new at this, and I have a feeling I've missed something
obvious.  Any help would be most appreciated.

	Paul Holbrook
	Holbrook.osbusouth@xerox.com