Non-root user adding ip address to interface

justjok · 07-24-2019, 10:56 AM

I have an application running as non-root user that needs to be able to add an additional IP address (VIP) to a physical interface.

Is there any way to allow this user to do that without the use of sudo permissions? (application is not able to prepend sudo to the ip addr command today).

Any help will be appreciated.

TenTenths · 07-24-2019, 11:05 AM

Try this, create a script called ip further "up" that users path so that it'll get executed first and use that as a wrapper like:

Code:

#!/bin/bash

/path/to/sudo /real/path/to/ip $*

jefro · 07-24-2019, 04:44 PM

Might be possible to add this user to a group that can change permissions but less than root.