Granting limited user a specific restricted cmd privilege

itnaa · 08-25-2007, 01:17 PM

Hi Folks,

Is there a way I can grant a user with limited privileges access/permission to execute a command which only the root can? For obvious reasons, I don't want to grant the limited user sweeping rights, however it needs access to certain information which can be obtained by the root only.

For example, the limited user needs to obtain the disk serial number using , for eg, % sginfo -a /dev/sda , which can't be run as a limited user. Is there a way I can grant this limited user access to run this command?

Thanks.

rtspitz · 08-25-2007, 02:20 PM

sudo !

--> /etc/sudoers

itnaa · 08-25-2007, 02:50 PM

Thanks rtspitz!!

itnaa · 08-26-2007, 03:00 PM

Haalp!! Goin' insane...

Am using visudo to edit the /etc/sudoers file. But, keeping getting syntax error at the following line:

root ALL =(ALL) ALL

And I haven't even touched this line, an original entry, in any fashion...

Am editting sudoers via an ssh session. Could it be inserting an unpalatable character or two (ok, wild one...grasping at straws here...) ??

itnaa · 08-26-2007, 03:18 PM

Separately, on the subject of sudo & it's use within a script, in the following thread,

...use without a tty...

it was suggested that one needs to add in the default section,

Defaults !requiretty

As per my understanding this change would apply to all sudoers. If I wanted to restrict this to a User_Alias, is the correct directive:

Defaults:XYZ !requiretty

where XYZ is the User_Alias ??

Thanks.