[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: limiting resources

Stefan O'Rear wrote:

> How about a serializing wrapper?

> Now, if you make the script NOPASSWD sudo -u sa_learn able, and make
> sa_learn only executable by user sa_learn, only one will be running at a
> time.

Or you could make the script setGID, then remove world read and execute
rights on the binary. Create a special group just for running this wrapper,
and make it the group of the script and binary.


Reply to: