About sudo

satimis · 05-21-2006, 04:49 AM

Hi folks,

FC5_64
======

I read

man sudo
and following links
http://www.linuxhelp.net/guides/sudo/
http://www.cs.wcupa.edu/~rkline/Linu...ment-sudo.html

but can't resolve how to allow an user, say ABC;

1)
to use all root's applications without providing him/her the root password

2)
to use only the selected root's applications such, package1, package2, etc.

Please shed me some light. TIA

B.R.
satimis

spirit receiver · 05-21-2006, 05:26 AM

I don't know the default in Fedora, but you should make sure that /etc/sudoers does not contain a line like this:

Code:

Defaults targetpw

Then sudo will ask for the invoking user's password instead of the root password. Then

Code:

ABC ALL=(ALL) ALL

should solve 1).
You can also tell sudo not to ask for a password at all:

Code:

ABC ALL=(ALL) NOPASSWD: ALL

And if you want to restrict this capability to certain commands, replace the last "ALL" with a comma separated list:

Code:

ABC ALL=(ALL) NOPASSWD: /sbin/halt, /sbin/reboot

satimis · 05-21-2006, 05:49 AM

Hi spirit receiver,

Tks for your advice.

Quote:

you should make sure that /etc/sudoers does not contain a line like this:

Code:

Defaults targetpw

# cat /etc/sudoers

Code:

.....

Defaults    env_reset
Defaults    env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
                        LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
                        LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
                        LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
                        LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
                        _XKB_CHARSET"

root    ALL=(ALL) ALL
....

Whether adding following line on the file;

Code:

ABC  ALL=(ALL) ALL

to solve 1) asking for ABC's login password

OR

Code:

ABC  ALL=(ALL) /sbin/halt, /sbin/reboot

to solve 2) above asking for ABC's login password

TIA

B.R.
satimis

spirit receiver · 05-21-2006, 07:08 PM

Er, what's your question? In both cases, ABC's password will be required. In the first example, ABC may invoke any command as root, whereas only the specified commands will be available in the second.

satimis · 05-22-2006, 03:15 AM

Hi spirit,

Your further advice noted with tks.

satimis