SUMMARY: sudo vs RBAC

[Ximo Domenech]

Hi,

original question was a comparation between sudo and
RBAC. See the summary below:

Thanks to,

Kanellopoulos Angelos
Mike Salehi 
ed at the7thbeer.com
Jeremy S. Loukinas 
Colin Bigam
Alan Pae

-----

RBAC Advantages:

-Built in to Solaris 9
-Possibility to configure with gui (Sun Management
Console)
-Very flexible
-Integrated into the Solaris authentication mechanism
-Supported by Sun

RBAC Cons:

-More complex to configure 
-Roles and rights not clearly defined
-Not as granular as sudo

Sudo Advantages:

- Easier to configure
- Small, lightweight
- No massive GUI needed to configure
- Very very granular
- Superior logging

Sudo Disadvantages:

- No ability to 'become' a role as with RBAC
- Have to define each and every command so setup takes
longer
- Need to compile and install
- Not integrated into the Solaris authentication
mechanism, acts like a 'shell' on top of the services.
- Not supported by Sun

In a few words, RBAC looks a good choice for a broad
environment and one central privilege granting
system, and sudo is better to set up pseudo root
access in smaller environments.

The size of your environment and your requirements
will determine which is the better tool.





__________________________________
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree
_______________________________________________
sunmanagers mailing list
sunmanagers at sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers