Hot answers tagged access-control-list
The reasoning for this question is questionable ... To critique your desired solution of creating a new user -- even if other root users can't change new-user's password they don't need to since root can read any file or change the file permissions of the file -- they don't ever need to "be" that user." I you have terabytes of data you want to prevent ...
Devices in the same subnet don't need router to access each other. Learn networking basics.
Ultimately if you give someone root access to your system, you give them everything on the system, that's why it is important for you to trust people you give root to.
In the Account Editor in MDaemon you can configure users to access via POP, IMAP and the WorldClient only from LAN IP's. The settings are under Mail Services and Web Services.
I suppose you could set an immutable extended filesystem attribute on /etc/shadow. That will prevent all changes to passwords, until the root user undoes the immutable bit. The command is "chattr +i /etc/shadow" If you are provisioning root access to a professional sysadmin you're supposed to assume that they won't change the password if you ask them not to ...
You should add a Virtual Network (VNet) into your environment and join all machines (even the Web Roles) to it. This way you can deploy the Linux VM and close all its public Endpoints and only use the private IP address range you assigned to it as the conncetion IP on your Web Roles. There is some good guidance online on achieving this configuration.
On a Cisco Route with IOS 12.2 or higher: access-list 700 deny 0800.2000.0000 0000.00FF.FFFF See the Cisco documentation for access-list(standard-ibm).
Only top voted, non community-wiki answers of a minimum length are eligible