Few questions about the Admin Gude

[Vladimir Kosovac]

Hi people.

I am about to start writing draft for Users/Accounts module of the
guide. Can anybody confirm whether I'm on the right track if module is
structured as per below:

1] Intro
    - A bit about the general stuff (multi-user system, root vs
unprivileged accounts, etc.)
    - Explanation of relevant files in /etc
    - What happens in the background when adding/modifying users/groups
2] Managing users/groups using system-config-users
3] 			"		using command line utilities
4] Password policies
5] Additional documentation

Does anything else needs covering?

Thanks, V

[Karsten Wade]

On Wed, 2006-12-06 at 21:15 +1300, Vladimir Kosovac wrote:
> Hi people.
>
> I am about to start writing draft for Users/Accounts module of the
> guide. Can anybody confirm whether I'm on the right track if module is
> structured as per below:
>
> 1] Intro

+         - Briefly say what the entire chapter/section covers
> A bit about the general stuff (multi-user system, root vs
>
> unprivileged accounts, etc.)
> Explanation of relevant files in /etc
> What happens in the background when adding/modifying users/groups
>
> 2] Managing users/groups using system-config-users
> 3] 			"		using command line utilities
> 4] Password policies
> 5] Additional documentation
>
> Does anything else needs covering?

Other than that addition above, the list seems complete to me.  I
reviewed and lightly edited/reformatted that page, the work is good.

Oh, is it worth mentioning or even just linking to SELinux
documentation?  Using su to switch users does not necessarily change the
user's role, does it?

Do you think it is worth covering permission escalation, e.g., su and
sudo?

There is content about sudo that we can pull as-is with updates into
this guide.  It is unpublished AFAICT, but the source is in CVS:

http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/
http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/en_US/sudo-tutori...

You can grab the module, which may not build as-is, by doing this:

cd /path/to/local/CVS/sandbox
export CVSROOT=:ext:<username>@cvs.fedoraproject.org:/cvs/docs
cvs -z3 co docs-common sudo-tutorial

I just tested, and this works:

cd sudo-tutorial
make html-en_US

You can then copy/paste from the HTML into the Docs/Drafts/...  Unless
this belongs in someone else's module. :)  In that case, they should use
this content. :) :)

- Karsten

Few questions about the Admin Guide

[Vladimir Kosovac]

On Thu, December 7, 2006 10:44 am, Karsten Wade wrote:
|*| On Wed, 2006-12-06 at 21:15 +1300, Vladimir Kosovac wrote:
|*|> Hi people.
|*|>
|*|> I am about to start writing draft for Users/Accounts module of the
|*|> guide. Can anybody confirm whether I'm on the right track if module is
|*|> structured as per below:
|*|>
|*|> 1] Intro
|*| +         - Briefly say what the entire chapter/section covers
|*|> 	- A bit about the general stuff (multi-user system, root vs
|*|> unprivileged accounts, etc.)
|*|> 	- Explanation of relevant files in /etc
|*|> 	- What happens in the background when adding/modifying users/groups
|*|> 2] Managing users/groups using system-config-users
|*|> 3] 			"		using command line utilities
|*|> 4] Password policies
|*|> 5] Additional documentation
|*|>
|*|> Does anything else needs covering?
|*|
|*| Other than that addition above, the list seems complete to me.  I
|*| reviewed and lightly edited/reformatted that page, the work is good.

Thanks

|*| Oh, is it worth mentioning or even just linking to SELinux
|*| documentation?  Using su to switch users does not necessarily change the
|*| user's role, does it?
|*|
|*| Do you think it is worth covering permission escalation, e.g., su and
|*| sudo?

I considered this with the targeted audience in mind, which I think is
more technical than say, DUG's readers. Therefore I wanted to avoid
paranoid approach to root account usage (with few warnings, of course) and
write a bit about sudo, as widely accepted good way of obtaining
privileges for one-off jobs. Linking to SELinux docs from here seems more
appropriate than other-way-around.

|*| There is content about sudo that we can pull as-is with updates into
|*| this guide.  It is unpublished AFAICT, but the source is in CVS:
|*|
|*| http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/
|*|
http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/en_US/sudo-tutori...
|*|
|*| You can grab the module, which may not build as-is, by doing this:
|*|
|*| cd /path/to/local/CVS/sandbox
|*| export CVSROOT=:ext:<username>@cvs.fedoraproject.org:/cvs/docs
|*| cvs -z3 co docs-common sudo-tutorial

Will co this and have a look.

Cheers, Vladimir

|*| I just tested, and this works:
|*|
|*| cd sudo-tutorial
|*| make html-en_US
|*|
|*| You can then copy/paste from the HTML into the Docs/Drafts/...  Unless
|*| this belongs in someone else's module. :)  In that case, they should use
|*| this content. :) :)
|*|
|*| - Karsten
|*| --
|*| Karsten Wade, RHCE, 108 Editor    ^     Fedora Documentation Project
|*|  Sr. Developer Relations Mgr.     |  fedoraproject.org/wiki/DocsProject
|*|    quaid.108.redhat.com           |          gpg key: AD0E0C41
|*| ////////////////////////////////// \\\\\\\\\\\\\\\\\\
|*| --
|*| fedora-docs-list mailing list
|*| [e-mail]
|*| To unsubscribe:
|*| https://www.redhat.com/mailman/listinfo/fedora-docs-list

[Vladimir Kosovac]

Karsten Wade wrote:
> On Wed, 2006-12-06 at 21:15 +1300, Vladimir Kosovac wrote:
> > Hi people.
> >
> > I am about to start writing draft for Users/Accounts module of the
> > guide. Can anybody confirm whether I'm on the right track if module is
> > structured as per below:
> >
> > 1] Intro
>     - Briefly say what the entire chapter/section covers
> > A bit about the general stuff (multi-user system, root vs
> >
> > unprivileged accounts, etc.)
> > Explanation of relevant files in /etc
> > What happens in the background when adding/modifying users/groups
> >
> > 2] Managing users/groups using system-config-users
> > 3] 			"		using command line utilities
> > 4] Password policies
> > 5] Additional documentation
> >
> > Does anything else needs covering?
>
> Other than that addition above, the list seems complete to me.  I
> reviewed and lightly edited/reformatted that page, the work is good.
>
> Oh, is it worth mentioning or even just linking to SELinux
> documentation?  Using su to switch users does not necessarily change the
> user's role, does it?
>
> Do you think it is worth covering permission escalation, e.g., su and
> sudo?
>
> There is content about sudo that we can pull as-is with updates into
> this guide.  It is unpublished AFAICT, but the source is in CVS:
>
> http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/
> http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/en_US/sudo-tutori...
>
> You can grab the module, which may not build as-is, by doing this:
>
> cd /path/to/local/CVS/sandbox
> export CVSROOT=:ext:<username>@cvs.fedoraproject.org:/cvs/docs
> cvs -z3 co docs-common sudo-tutorial

I have only anonymous access to

CVSROOT=:pserver:[e-mail]:/cvs/docs

Found sudo-tutorial draft there, written by Paul Frields and Tommy
Reynolds though. Are we talking about the same document?

Vladimir
> I just tested, and this works:
>
> cd sudo-tutorial
> make html-en_US
>
> You can then copy/paste from the HTML into the Docs/Drafts/...  Unless
> this belongs in someone else's module. :)  In that case, they should use
> this content. :) :)
> Karsten

[Draciron Smith]

I'd suggest including info about shared files/group security, how to set up
shared file repositories. For many Linux users this can be a lesson in
frustration but is a commonly needed task by many users.

Other than that looks like you covered everything top level.

On 12/8/06, Vladimir Kosovac  wrote:
> Karsten Wade wrote:
> > On Wed, 2006-12-06 at 21:15 +1300, Vladimir Kosovac wrote:
> > > Hi people.
> > >
> > > I am about to start writing draft for Users/Accounts module of the
> > > guide. Can anybody confirm whether I'm on the right track if module is
> > > structured as per below:
> > >
> > > 1] Intro
> >     - Briefly say what the entire chapter/section covers
> > >  - A bit about the general stuff (multi-user system, root vs
> > >
> > > unprivileged accounts, etc.)
> > >      - Explanation of relevant files in /etc
> > >      - What happens in the background when adding/modifying
>
> users/groups
> > > 2] Managing users/groups using system-config-users
> > > 3]                   "               using command line utilities
> > > 4] Password policies
> > > 5] Additional documentation
> > >
> > > Does anything else needs covering?
> >
> > Other than that addition above, the list seems complete to me.  I
> > reviewed and lightly edited/reformatted that page, the work is good.
> >
> > Oh, is it worth mentioning or even just linking to SELinux
> > documentation?  Using su to switch users does not necessarily change the
> > user's role, does it?
> >
> > Do you think it is worth covering permission escalation, e.g., su and
> > sudo?
> >
> > There is content about sudo that we can pull as-is with updates into
> > this guide.  It is unpublished AFAICT, but the source is in CVS:
> >
> > http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/
>
> http://cvs.fedora.redhat.com/lxr/docs/source/sudo-tutorial/en_US/sudo-tutori...
> > You can grab the module, which may not build as-is, by doing this:
> >
> > cd /path/to/local/CVS/sandbox
> > export CVSROOT=:ext:<username>@cvs.fedoraproject.org:/cvs/docs
> > cvs -z3 co docs-common sudo-tutorial
>
> I have only anonymous access to
>
> CVSROOT=:pserver:[e-mail]:/cvs/docs
>
> Found sudo-tutorial draft there, written by Paul Frields and Tommy
> Reynolds though. Are we talking about the same document?
>
> Vladimir
> > I just tested, and this works:
> >
> > cd sudo-tutorial
> > make html-en_US
> >
> > You can then copy/paste from the HTML into the Docs/Drafts/...  Unless
> > this belongs in someone else's module. :)  In that case, they should use
> > this content. :) :)
> > Karsten
>
> --
> fedora-docs-list mailing list
> [e-mail]
> To unsubscribe:
> https://www.redhat.com/mailman/listinfo/fedora-docs-list

[Karsten Wade]

On Fri, 2006-12-08 at 19:06 +1300, Vladimir Kosovac wrote:
> I have only anonymous access to
>
> CVSROOT=:pserver:[e-mail]:/cvs/docs

That can be fixed. :)
> Found sudo-tutorial draft there, written by Paul Frields and Tommy
> Reynolds though. Are we talking about the same document?

That's the one.

- Karsten