visudo question

walidaly · 05-23-2007, 01:20 AM

how do I give permission to a user to run especial service scripts as /etc/init.d/scriptname doesn't work for that special script
I tried something like
www ALL = NOPASSWD: /sbin/service httpd,/etc/init.d/iptables
but that give a parse error!

mmn357157 · 05-23-2007, 02:19 AM

hi,

login as root
# visudo

(write something like this)

User_Alias MYUSERS = <user1>, <user2>, <user3>
(the users to whom you are giving special permissions)

Runas_Alias OP = root
(giving root users privilages, normally it will be there, optional, you can also put ALL)

Host_Alias SERVERS = master, mail
(allowed on these hosts only. optional, otherwise you can put ALL)

Cmnd_Alias MYSERVICES = /etc/init.d/<service script name>, <another script or binary>, <another one>
(note: the path to service scripts varies, redhat (/etc/rc.d/init.d) suse(/etc/init.d))

(add one more line)

MYUSERS SERVERS = (OP) NOPASSWD: MYSERVICES

(NOPASSWD: is optional, if you put, no passwd will be asked)

(write changes)
(more info: man sudoers)
______________________________________
mmn

mmn357157 · 05-23-2007, 02:26 AM

one more,

start service like this..

(if you want to start httpd)

issue command /etc/init.d/httpd start

___________________________
mmn

rkelsen · 05-23-2007, 02:36 AM

Quote:

Originally Posted by walidaly

I tried something like
www ALL = NOPASSWD: /sbin/service httpd,/etc/init.d/iptables

So do you want this to work for all users in the 'www' group?

Try this:

Code:

%www ALL= NOPASSWD: /etc/init.d/iptables

Failing that, what is the exact error you get?

walidaly · 05-23-2007, 03:28 AM

I'm trying to excute fcgi with server script, it doesn't run through /etc/init.d/scriptname -why! I never know- but it runs through /sbin/service scriptname restart-stop-start...trying to add /sbin/service scriptname in visudo creates parse error

mmn357157 · 05-23-2007, 08:59 AM

please put here the exact command you issued and its console error output.

i think, then you will be get answered more quickly.

____________________________
mmn