<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">You need to report who has the root passwords and who is in the sudo files, and whether there are any other means of becoming root. Powerbroker or other tools including Tivoli, puppet etc are included. If you can run a puppet script as root, you’re root.<div><br><div dir="ltr">Sent from my iPad</div><div dir="ltr"><br><blockquote type="cite">On Apr 17, 2020, at 11:56 AM, John Malloy <jomalloy@gmail.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr"><div><br></div>What is the best way to provide proof to an audit person who needs to know all the root/sudo users for a RHEL 6 server?<div><br></div><div>(I am new at this company, and don't have access to all their resources) </div><div><br></div><div>We can provide the /etc/passwd & /etc/sudoers file (the auditor may not know how to read these files)</div><div><br></div><div>We also have the RedHat Identity Management running here, but I am not familiar with this tool.</div><div><br></div><div>Any suggestions would be appreciated.</div><div><br></div><div>Thanks!</div><div><br clear="all"><div><div dir="ltr" data-smartmail="gmail_signature"><br>John Malloy<br><a href="mailto:jomalloy@gmail.com" target="_blank">jomalloy@gmail.com</a></div></div></div></div>
<span>_______________________________________________</span><br><span>bblisa mailing list</span><br><span>bblisa@bblisa.org</span><br><span>http://www.bblisa.org/mailman/listinfo/bblisa</span><br></div></blockquote></div></body></html>