Virtual system administration environment for non-root user

A system, comprising:

• an instruction processor, a data storage and a memory operatively coupled together;
• said data storage including one or more storage media tangibly embodying a hierarchical root file system containing plural system files in one or more system directories for supporting data processing operations on behalf of users of said computing system;
• said memory including a storage medium tangibly embodying a program of instructions executable by said processor to perform operations for establishing a virtual system administration environment in which one or more of said users that are non-root users can perform system administration operations that normally require root privileges, said operations comprising:
• providing a virtual control module having a virtual file system that includes one or more virtual directories corresponding in name to one or more of said system directories of said root file system, each of said virtual directories containing one or more symbolic links corresponding in name and symbolically linking to one or more of said system files representing symbolic link targets;
• said symbolic links having non-root permissions that allow said non-root users to perform software installations in said virtual control module that delete or change said symbolic links, or replace them with system files that are not symbolic links;
• providing a capability to resolve said symbolic links from within said virtual control module to allow said non-root users to execute said one or more system files by invoking said symbolic links of the same name;
• placing one or more of said non-root users in said virtual control module by setting a root directory of said virtual file system as an apparent root directory of said one or more non-root users;
• and
• maintaining a log of said software installations for use by a system administrator in considering whether to perform said software installations in said root file system,
• wherein said virtual control module is provided in one or more home directories associated with said one or more non-root users or in a group directory associated with said one or more non-root users.

A computer program product, comprising:

• one or more computer-readable storage media:
• program instructions stored on said one or more storage media for programming a computing system having an instruction processor, a memory and a data storage operatively coupled together, said data storage including one or more storage media tangibly embodying a hierarchical root file system containing plural system files in one or more system directories for supporting data processing operations on behalf of users of said computing system, said program instructions being operative to program said processor to perform operations for establishing a virtual system administration environment in which one or more of said users that are non-root users can perform system administration operations that normally require root privileges, said operations comprising:
• providing a virtual control module having a virtual file system that includes one or more virtual directories corresponding in name to one or more of said system directories of said root file system, each of said virtual directories containing one or more symbolic links corresponding in name and symbolically linking to one or more of said system files representing symbolic link targets;
• said symbolic links having non-root permissions that allow said non-root users to perform software installations in said virtual control module that delete or change said symbolic links, or replace them with system files that are not symbolic links;
• providing a capability to resolve said symbolic links from within said virtual control module to allow said non-root users to execute said one or more system files by invoking said symbolic links of the same name;
• placing one or more of said non-root users in said virtual control module by setting a root directory of said virtual file system as an apparent root directory of said one or more non-root users;
• and
• maintaining a log of said software installations for use by a system administrator in considering whether to perform said software installations in said root file system,
• wherein said virtual control module is provided in one or more home directories associated with said one or more non-root users or in a group directory associated with said one or more non-root users.