RBAC security
Hi,
Problem: (Solaris OE - 5.8)
I want to create a user - "user1" who would be able to kill other normal users' shell process to log them out forcefully. For this he will su into a role - "killuser". This role has been assigned with a profile - "Killuser". The definition supplied in /etc/security/prof_attr and /etc/security/exec_attr are as follows:
/etc/security/prof_attr :
Killuser:::Kill Other users:
/etc/security/exec_attr:
Killuser:suser:cmd:::/usr/bin/kill:uid=0
I have assigned the profile to role - "killuser" and the role "killuser" to user - "user1" using rolemod and usermod. After modifications containts of /etc/user_attr is also getting updated. But by logging as user1 and suing into killuser, I am not able kill shell process of any other normal user. I am getting response as "Permission Denied".
Please suggest.
