Virtual TapeServer 8.4 Configuration Guide
136 | Virtual TapeServer Configuration Guide
Note the following about the vtsa account:
l Accessible by SSH
l Runs in a restricted shell
l Can “su” to other accounts
l Through “sudo”, can issue the following commands:
l /sbin/tune2fs -l /*
(runs as root)
l /bin/cat l /usr/bin/passwd
l /usr/local/tape/bin/getVTS_
dbginfo
(runs as root)
l /sbin/chkconfig l /bin/ping
l /bin/bash/usr/local/tape/bin/ge-
tVTS_dbginfo
(runs as root)
l /usr/bin/clear l /bin/ps
l /usr/bin/updatedb
(runs as root)
l /usr/bin/crontab l /sbin/reboot
(runs as root)
l /sbin/fdisk -[vl]
(runs as root)
l /bin/date l /usr/bin/rsh
l /sbin/fdisk -[sl] /*
(runs as root)
l /bin/df l /usr/bin/sftp
l /usr/bin/chage -l *
(runs as root)
l /bin/grep l /sbin/shutdown
(runs as root)
l /sbin/service --status-all (runs as
root)
l /usr/bin/head l /usr/bin/ssh
l /usr/bin/less l /usr/bin/hexdump l /bin/su
l /bin/vi l /usr/bin/id l /usr/bin/sudo
l /usr/bin/vim l /bin/kill l /usr/bin/tail
l /sbin/hwclock -r l /usr/bin/locate l /usr/bin/telnet
l /sbin/hwclock --show l /bin/ls l /usr/bin/top
l /sbin/hwclock -v l /usr/bin/man l /bin/uname
l /sbin/hwclock --version l /bin/mount
(runs as root)
l /usr/bin/zgrep
l /sbin/hwclock --getepoch l /bin/netstat l /usr/bin/du
l /sbin/ifconfig l /usr/bin/od l /bin/ts version
(runs as root)