I am looking for a script which we can pass as an argument to the pbrun command.
Eg:
Login: test1
Passwd: xxxxxxx
Welcome to Solaris 10 gcmsys01
$ pbrun sysadmins safeksh
Here sysadmins is the group-name and safeksh is a script which will disable any harmful commands like rm, init 6, format etc etc., similarly, there should be a fullksh script which will allow full shell access to the server (can execute any root commands without any restriction). This script is to overcome any unwanted outages due to some harmful commands.
Any suggestions are highly appreciated.
echo bad >/dev/w0d0(or whatever a disk device is called under Solaris)). You need to allow only the commands that you consider safe. Which commands do you want to allow? – Gilles Dec 26 '11 at 22:52