For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Nov 19, 2013

Role based access of specific Unix like commands?

Hello Folks,   Is there a way in BIG-IP where we can configure a user with specific command privileges rather than allowing all? For eg. the user should be able to execute "cat" command in order t...
role based user access
TMSH
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 19, 2013

The ironic thing about this is that you could technically either create a non-admin user with rights to access the Linux shell, but no rights to access specific command line utilities, or mess with SELinux to restrict specific commands, except that the BIG-IP management plane wouldn't allow anyone less than an administrator to have Linux shell access. The better option, as Steve has stated, is to assign user roles and TMSH access. F5 has gone to great lengths to "wrap" useful shell commands into TMSH so that they can be used safely.