5.6.1. - Extra Protection
At some spec installations, the administrators need to prevent
users from accessing or modifying the configuration of certain motors.
The
edconf
program supports a wizard mode that allows such protection.
You will need to create a user in the system password file named
specwiz.
If you type
^W while running
edconf
you will be prompted for the wizard's password.
If you enter it properly, you will be able to select additional levels
of configuration protection.
To prevent users from disabling the wizard protections by editing the
config
file by hand, you can use file protection features built in to UNIX.
One possibility is to make the
edconf
program
set-user id
specwiz
or
specadm,
change the ownership of the
config
files to
specwiz
or
specadm,
and change the modes of the
config
files to
rw-r--r--. Do that using commands (as super user) like
chown specadm edconf fourc/config surf/config ...
chmod u+s edconf
chmod 644 fourc/config surf/config ...
|