Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?

From	Gene Heskett <gheskett@shentel.net>
Newsgroups	linux.debian.user
Subject	Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?
Date	2019-06-20 18:40 +0200
Message-ID	<yb8gp-Qm-5@gated-at.bofh.it> (permalink)
References	<yb2Xn-5VO-1@gated-at.bofh.it> <yb4FP-71p-1@gated-at.bofh.it>
Organization	none,nada,zip

Show all headers | View raw

On Thursday 20 June 2019 08:30:57 Bagas Sanjaya wrote:

> Carl (carlf@panix.com) said:
> > OK, which meaning of "program" are you using here? In American (and
> > UK) English, it can mean either "set of instructions that run on a
> > computer" or "television entertainment item." You seem to be using
> > it both ways in this message or confusing the two.
>
> In this case, "program" means "instructions that run on a computer",
> or "software".
>
> In hypothetical scenario as I described in the starting of this
> thread, I imagine that TV programs run by TV stations can be thought
> as computer programs in TV station's production systems.
>
> > I would instead make the specific programs the students/teens should
> > be using executable by them without needing sudo. Linux permissions
> > make this very straightforward.
>
> I mean:
>
> # chown root:remaja /opt/teen-programs/bin/* && chmod 755
> /opt/teen-programs/bin/*
>
> But we're considering in this thread when most age-restricted programs
> can only be run using sudo, that is, such programs can only be run by
> root or using sudo.

As a retired Chief Engineer, one of my duties was also the holder of a 
letter designating me as the Chief Operator of that tv station.
So one of my duties was seeing to it that the rules as published in 47 
CFR that applied to both the technical operations, and the legal things 
were enforced. A subscription to that 47 CFR from the GPO, can be a very 
wise expense.  Not knowing something in it is a null/void defense.  
Cover you ass in other words.

What you want to do opens a pandora's box of stuff these teenagers might 
like to see aired.  That means putting their stuff in a permissions 
sandbox that only the chief operator has rights to move the materiel out 
of that sandbox into the broadcast queue. IOW, someone with that letter 
of authority must exist, and the FCC gives him/her that veto power 
because he/she is also the person they'll monetarily fine at $27,000 per 
instance when something airs that shouldn't.

And there are several categories of no-no's. Payola schemes by the 
General Sales Manager, backed by the General Manager himself got shut 
down by me. They went to the owner to get me fired, and he told them to 
go pound sand, I was saving lots of money. That GM got a surprise visit 
from the corporate bookkeeper, and was escorted out on 15 minutes notice 
to collect his personal stuff by a deputy for cooking the books.

Anyway, what you want to do to facilitate their creativity still needs a 
final approval by someone with that letter giving then the power to say 
no.  And likely an IT guy smart enough to stay ahead of their attempts 
to climb that fence.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>

Thread

Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-19 06:30 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? john doe <johndoe65534@mail.com> - 2019-06-19 08:00 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-19 08:10 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-19 13:40 +0200
    Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 07:20 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-20 07:40 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 09:20 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-20 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-20 14:10 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-20 13:00 +0200
        Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-20 14:50 +0200
          Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-20 18:40 +0200
            Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl Fink <carlf@panix.com> - 2019-06-21 21:50 +0200
              Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 01:00 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 04:30 +0200
                Re: Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-22 10:40 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 17:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Brad Rogers <brad@fineby.me.uk> - 2019-06-22 18:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 18:30 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 18:50 +0200
                Re: Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:20 +0200
                Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Carl <carlf@panix.com> - 2019-06-22 14:20 +0200
              Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 02:40 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-22 10:10 +0200
                Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 10:50 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? deloptes <deloptes@gmail.com> - 2019-06-22 11:50 +0200
                Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-22 12:30 +0200
                Re: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-22 12:40 +0200
                Off-topic: Action [Was: Re: Off topic: remaja (teens) Erik Christiansen <dvalin@internode.on.net> - 2019-06-22 13:40 +0200
                Re: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-22 23:40 +0200
                Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 01:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 01:50 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 03:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) deloptes <deloptes@gmail.com> - 2019-06-23 09:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Elmo <moelmoel2714@gmail.com> - 2019-06-23 10:00 +0200
                Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-06-23 10:50 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 16:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) rhkramer@gmail.com - 2019-06-23 18:00 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic:  remaja (teens) Curt <curty@free.fr> - 2019-06-23 18:30 +0200
                Re: Off topic: German. Was: Off topic: Carbon. Was: Off topic: remaja (teens) Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-23 19:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) <tomas@tuxteam.de> - 2019-06-23 11:00 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 12:30 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Georgios <gpdsbe@mailbox.org> - 2019-06-23 20:10 +0200
                Re: Off topic: Carbon. Was: Off topic: remaja (teens) Joe <joe@jretrading.com> - 2019-06-23 22:50 +0200
                Re: Off topic: Carbon. John Hasler <jhasler@newsguy.com> - 2019-06-23 23:10 +0200
                Teenagers (was: Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous?) rhkramer@gmail.com - 2019-06-22 12:30 +0200
                Re: Giving remaja (teens) group full administrator privileges through sudo - dangerous? Gene Heskett <gheskett@shentel.net> - 2019-06-22 16:30 +0200
      Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Jimmy Johnson <field.engineer@gmail.com> - 2019-06-23 01:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-23 02:10 +0200
          Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? <tomas@tuxteam.de> - 2019-06-23 11:10 +0200
          Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Richard Hector <richard@walnut.gen.nz> - 2019-06-24 02:40 +0200
            Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Andy Smith <andy@strugglers.net> - 2019-06-24 02:50 +0200
  Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Bagas Sanjaya <bagasdotme@gmail.com> - 2019-06-25 06:00 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? mick crane <mick.crane@gmail.com> - 2019-06-25 09:10 +0200
    Re: Giving remaja (teens) group full administrator privileges through  sudo - dangerous? Aidan Gauland <aidalgol@fastmail.net> - 2019-06-25 10:00 +0200
      Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Curt <curty@free.fr> - 2019-06-25 10:50 +0200
        Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-25 14:50 +0200
  Re: Giving remaja (teens) group full administrator privileges  through sudo - dangerous? andreimpopescu@gmail.com - 2019-07-02 14:50 +0200

csiph-web