[sudo-users] RBAC .vs. SUDO

Glenn Pitcher Glenn.Pitcher at MedImpact.com
Wed Nov 9 12:13:40 EST 2005


I agree... While RBAC does give you greater flexibility, I've found sudo to
be much easier to implement and I also believe it's better in a
heterogeneous environment since each vendor seems to implement RBAC
differently (at least for now.)

---
Glenn Pitcher
Security Engineer
MedImpact Healthcare Systems, Inc.
San Diego, CA
glenn dot pitcher at medimpact.com 

-----Original Message-----
From: Galen Johnson [mailto:Galen.Johnson at sas.com] 
Sent: Wednesday, November 09, 2005 8:32 AM
To: Asif Iqbal; sudo-users at sudo.ws
Subject: RE: [sudo-users] RBAC .vs. SUDO


RBAC can give you the same functionality (and can be more flexible than
sudo)...however, the big trade off here is ease of implementation.  You also
have to setup your system to include the acl info which requires an
additional inode for every file that uses it. (this can be a problem with
inode limitations for those systems that have MANY small files and tend to
run short on inodes).

=G= 

-----Original Message-----
From: sudo-users-bounces at courtesan.com
[mailto:sudo-users-bounces at courtesan.com] On Behalf Of Asif Iqbal
Sent: Wednesday, November 09, 2005 11:06 AM
To: sudo-users at sudo.ws
Subject: [sudo-users] RBAC .vs. SUDO


Hi All

Any one can point me to a comparison chart or something similar on RBAC .vs.
SUDO. I am using sudo on all my Solaris systems for last five years. However
recently I am noticing some interest in our organization about RBAC. I
personally think SUDO can achieve the same features that RBAC offer with
ease but looking for opinions in this community.

Thanks for your feedback.

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the
credit...try  to be in the first group;...less competition there."  - Indira
Gandhi ____________________________________________________________ 
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users

____________________________________________________________ 
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users

------------------------------------------------------------------------------
This transmission, together with any attachments, is intended only for the use of those to whom it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law.  If you are not the intended recipient, you are hereby notified that any distribution or copying of this transmission is strictly prohibited.  If you received this transmission in error, please notify the original sender immediately and delete this message, along with any attachments, from your computer.
==============================================================================



More information about the sudo-users mailing list