There has been a lot discussed around this option previously. I am not sure, off the top of my head whether there is an option to turn it off or not - other than changing the SHELL environment definition.

Note that AIX 5.2 is very very near "end of official support". It did get a six month extension, but for anything on POWER5 and above, you really want AIX 5.3.

And note: AIX 5.2 has already had it's last TL (technology level) to TL10. Other than "security fixes" AIX 5.2 has reached the end of updates already.

Hello all,

Due to using sudo lists for specific tasks by specific roles, of which some require root access, I would like to add smitty (including fastpaths) to the list of commands allowed to run as root. However, smitty has the option to open a shell, which would eliminate the specific role / access this user has.

For this I would like to either remove the shell access altogether or (preferably) change the command exectured by F9 from /usr/bin/ksh to something else so I can check for root privileges.

Unfortunately the option in sudo to deny opening a shell from a program does not work under AIX, according their documentation.

The server I am testing on is AIX 5.2 ML4, will upgrade to subsequent maintenance levels to see if and how these affect the "solution".