sudo

slufoot80 · 03-07-2016, 10:48 AM

ok I have a script that I want a user to run as root using sudo but I have a few problems

1) The following script runs fine, but I only want the user to run only the script and nothing more

2) when I run sudo and reboot it works and I don't want the user to run anything else except the script

3) when I run it the first time it asks for the root password when I type it in it doesn't ask anymore

Code:

#!/bin/bash
clear                                                   # clear screen

PROJECTNAME=mcksa                                   # variable name of project storage area
OLDDIRECTORYNAME=/dcfs0001mi/                           # variable name of old directory
NEWDIRECTORYNAME=/dcfs01_new/                           # variable name of new directory

export PROJECTNAME                                      # export variable
export OLDDIRECTORYNAME                                 # export variable
export NEWDIRECTORYNAME                                 # export variable

unlink /forms/$PROJECTNAME                              # unlinking of old project name from forms
sleep 1
ln -s $NEWDIRECTORYNAME$PROJECTNAME /forms/$PROJECTNAME # linking of new project name
sleep 1
cd /forms
ls -l |grep $PROJECTNAME                                # checking new link name

cd $OLDDIRECTORYNAME                                    # changing to old directory
sleep 1
mv $PROJECTNAME $PROJECTNAME.old                        # moving project name to .old
sleep 1
ls -l|grep $PROJECTNAME                                 # checking if project was moved to .old

line from sudoers file

Code:

username linux-nuau = (ALL) NOPASSWD: /usr/sbin/changelink

pan64 · 03-07-2016, 10:53 AM

sudo does not ask for root's password, but for user's one
you can specify in /etc/sudoers what is allowed, so you can allow to execute only a script. But be careful, do not allow the users to modify that script.
Would be nice to show what did you configure, otherwise hard to say anything

ondoho · 03-11-2016, 01:27 AM

Quote:

Originally Posted by slufoot80

Code:

username linux-nuau = (ALL) NOPASSWD: /usr/sbin/changelink

on my system a similar line would look like this:

Code:

username ALL=NOPASSWD: /usr/sbin/changelink

and works, i.e. i can call the script with

Code:

sudo changelink

and don't have to enter my password.

Sudo version 1.8.15

does that help?

btw, i wouldn't put custom scripts in /usr/sbin, rather in /usr/local/(s)bin or even /home/username/bin.