using sudo

kaiser123 · 11-03-2008, 01:17 PM

I'm a newbie trying to figure out the best way to use sudo.
I am trying to only allow a group of users to execute one file as root.
I have used visudo to add the following:-
%users ALL=/bin/ktest1
once i have saved and tried to run from a user account i get the following error message
Sorry, user ******** is not allowed to execute '/bin/ktest1' as root on localhost.localdomain.
Does anyone have any ideas where i have gone wrong?

Thanks

Poetics · 11-03-2008, 01:38 PM

What permissions does /bin/ktest1 have? (ls -l /bin/ktest1)

john test · 11-03-2008, 01:50 PM

Did you try

Code:

chmod +x /bin/ktest1

anomie · 11-03-2008, 01:50 PM

Also, you put your user in the 'users' group, right?

(Note: it's a good idea to include your OS / version when requesting help.)

kaiser123 · 11-04-2008, 03:40 AM

thanks for the replies,

after checking through your questions i had the permissions wrong, and trying to run the program using ./bin/ktest1 instead of /bin/ktest1

Is there any loopholes that i should be aware of when giving users access to this command i have heard that you can add a no breakout command is this wise? basically how do i ensure that the user cannot use this to gain more privilidges?

i am currently using
fedora
release
Kernel Linux 2.6.25-14.fc9.i686
GNOME 2.22.1

Thanks