Partial Summary: can't do "sudo -s" on hardened box

Hi All,
 
The problem is my colleague's id on the same server
is OK (ie he could do 'sudo -s').
 
Yes, /usr/bin/ksh is in /etc/shells :
# more shells
/bin/sh
/bin/csh
/bin/ksh
/usr/bin/sh
/usr/bin/csh
/usr/bin/ksh
/bin/false
/sbin/sh
/usr/local/bin/bash

I've also tried Frank's suggestion in /etc/sudoers :
root ALL=(ALL) ALL
9gohpo ALL=(ALL) ALL
%smcadmin ALL=ALL
%helpdesk ALL=ALL, !SHELLS

but I'm still getting the message :
Sorry, user 9gohpo is not allowed to execute '/usr/bin/ksh' as
 root on sp01qtt02ist5s5
when doing 'sudo -s'
 
Is there some daemon that I must restart for it to take
effect?  I've placed my id under both smcadmin &
helpdesk groups in /etc/group
 
 
Thanks
G Sun

=========================
is /usr/bin/ksh in /etc/shells?

Could be something as silly as that.

-Sal


 Yahoo! Mobile
- Download the latest ringtones, games, and more!
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers