Re: using iptables by normal user - not gui

Re: using iptables by normal user - not gui

[Edmundo Carmona]

have you checked doing it with sudo? I think you can set what user can
execute a given command (iptables in this case).

On 11/24/05, Daniel Chojecki <boka@piekna.pl> wrote:
> Hi,
>
> i would like to give access to iptables to one user in my system.
>
> Is it possible and how to setup my system to allow it ?
>
> --
> greetz
> boka
>
>
>

using iptables by normal user - not gui

[Daniel Chojecki]

Hi,

i would like to give access to iptables to one user in my system.

Is it possible and how to setup my system to allow it ?

-- 
greetz
boka

Re: using iptables by normal user - not gui

[Georgi Alexandrov]

Edmundo Carmona wrote:

>have you checked doing it with sudo? I think you can set what user can
>execute a given command (iptables in this case).
>
>On 11/24/05, Daniel Chojecki <boka@piekna.pl> wrote:
>  
>
>>Hi,
>>
>>i would like to give access to iptables to one user in my system.
>>
>>Is it possible and how to setup my system to allow it ?
>>
>>    
>>
man 5 sudoers

Re: using iptables by normal user - not gui

[R. DuFresne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 24 Nov 2005, Daniel Chojecki wrote:

> Hi,
>
> i would like to give access to iptables to one user in my system.
>
> Is it possible and how to setup my system to allow it ?


you sure can give away the farm if you wish, either hand-off the root 
password or setup sudo.  Is this a wise thing to do, in most cases, no...



Thanks,

Ron DuFresne
- -- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         admin & senior security consultant:  sysinfo.com
                         http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

...We waste time looking for the perfect lover
instead of creating the perfect love.

                 -Tom Robbins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFDhi02st+vzJSwZikRAqPpAJ9jNZqW8cgN3EQgi7/7j0apgdytcwCfelrP
Vfpm5zr8Sks8V1C/TvEX3L4=
=llxA
-----END PGP SIGNATURE-----

Re: using iptables by normal user - not gui

[Thomas Kuiper]

Hi,

out of pure curiousity, why would you like to give a _user_ access to 
iptables? You give him access to "manipulate" everything.

Thomas

Daniel Chojecki wrote:

> Hi,
>
> i would like to give access to iptables to one user in my system.
>
> Is it possible and how to setup my system to allow it ?
> 

Re: using iptables by normal user - not gui

[Bhavatosh]

On Thu, 2005-11-24 at 17:21 +0100, Daniel Chojecki wrote:
> Hi,
> 
> i would like to give access to iptables to one user in my system.
> 
> Is it possible and how to setup my system to allow it ?
> 

Try sudo utility.You can give access of iptables to Normal user.


Regards,
Bhavatosh

Re: using iptables by normal user - not gui

[Chris Brenton]

On Fri, 2005-11-25 at 16:53 +0530, Bhavatosh wrote:
> On Thu, 2005-11-24 at 17:21 +0100, Daniel Chojecki wrote:
> > 
> > i would like to give access to iptables to one user in my system.
> > 
> > Is it possible and how to setup my system to allow it ? 
> 
> Try sudo utility.You can give access of iptables to Normal user.

Agreed. I wrote up a paper on how to set this up a while back. Info is
here:
http://www.loganalysis.org/sections/parsing/application-specific/firewall-logging.html

HTH,
Chris