/etc/sudoers file

devUnix · 08-30-2013, 02:57 AM

Hi,

The /etc/sudoers file contain this line:

Code:

cmdb ALL=(root) NOPASSWD: /sbin/ethtool, /sbin/mii-tool, /usr/sbin/lsof, /usr/sbin/dmidecode, /bin/netstat

ALL=(root) :- does it mean the commands specified will can be run by the user cmdb with the permissions of the root user?

Thanks,
Dev.

druuna · 08-30-2013, 03:57 AM

Quote:

ALL=(root) NOPASSWD

This means that the command can be run by all users, the command will be executed as root without asking for a password.

The sudoers record format looks like this:

Code:

usernames/group servername = (usernames command can be run as) command

Also have a look at these:
- HowTO: Sudoers Configuration
- Quick HOWTO : Ch09 : Linux Users and Sudo

Firerat · 08-30-2013, 04:22 AM

in your example ,

user cmdb can execute /sbin/ethtool,..., without password

cmdb could be an alias , defined earlier in sudoers, for one or more users