Are boolean expressions supported in /etc/sudoers file?

laredotornado · 09-17-2012, 08:06 PM

Hi,

I'm using CentOS. In my CentOS /etc/sudoers file, I want to specify that tty is required for everything except a couple of commands, which I've defined as ...

Code:

Cmnd_Alias      CPCMD = /bin/cp /var/lib/jenkins/jobs/My\ Client/workspace/target/myclient*.war /usr/java/jboss/server/default/deploy
Cmnd_Alias     RMCMD = /bin/rm /usr/java/jboss/server/default/deploy/myclient*.war

How do I say I don't want these two commands to require tty? I've tried ...

Code:

Defaults       !CPCMD  requiretty
Defaults       !RMCMD  requiretty

but that doesn't work. I'm thinking some kind of boolean expression of the above is required, but not sure the proper way to write it.

Thanks, - Dave

segmentation_fault · 09-18-2012, 04:47 AM

I am quoting from http://www.gratisoft.us/sudo/man/1.7.6/sudoers.man.html

BNF-like definition for defaults override:

Quote:

An example:

Quote:

Lastly, we disable shell escapes for the commands in the PAGERS Cmnd_Alias (/usr/bin/more, /usr/bin/pg and /usr/bin/less).

Defaults syslog=auth
Defaults>root !set_logname
Defaults:FULLTIMERS !lecture
Defaults:millert !authenticate
Defaults@SERVERS log_year, logfile=/var/log/sudo.log
Defaults!PAGERS noexec

So I guess in your case you are asking for tty. You are doing the opposite, but I may be wrong. I am a sudo noob

laredotornado · 09-18-2012, 08:24 AM

Right, I am asking for tty for everything except two commands. However, given the documentation, how do I combine my two command alias' to form a Cmnd_List ? - Dave