LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-22-2019, 05:20 AM   #1
thomasbb
Member
 
Registered: Mar 2019
Location: Nice
Distribution: Xubuntu
Posts: 123

Rep: Reputation: Disabled
Question Can the network administrator give me sudo privileges only on the localhost ?


Hello,

The computer I work with is connected to a private network. From time to time, I need to update an application like Mozilla or add packages like texlive's.

Is there a solution to have the sudo privileges only on this computer without risks for the rest of the network, so I can update applications and add small packages without calling for the administrator ?
 
Old 04-22-2019, 05:36 AM   #2
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,308
Blog Entries: 3

Rep: Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721
The part in the configuration file where it often says "ALL=" can be replace by the host name, or an alias for several host names, if the host has the ability to look up its own name in DNS. But that is not needed unless /etc/sudoers is hosted remotely and shared by multiple machines.

As far as the applications go, sudo can be configured to allow use of specific applications, such as apt or apt-get. With care, you can even decide on which parameters are allowed.

Code:
%localadmins hosta=(root:root) /usr/bin/apt-get update, \
        /usr/bin/apt-get upgrade, /usr/bin/apt-get dist-upgrade
Or, wildly,

Code:
%localadmins hosta=(root:root) /usr/bin/apt-get
See Michael W Lucas' talk "sudo: You're Doing It Wrong" in either slide form or video. He'll have a new edition of sudo Mastery out sometime maybe this year, but that won't help at the momement.

Last edited by Turbocapitalist; 04-22-2019 at 05:37 AM.
 
Old 04-22-2019, 06:13 AM   #3
thomasbb
Member
 
Registered: Mar 2019
Location: Nice
Distribution: Xubuntu
Posts: 123

Original Poster
Rep: Reputation: Disabled
Lightbulb Great

Cheers !

Quote:
Originally Posted by Turbocapitalist View Post
See Michael W Lucas' talk "sudo: You're Doing It Wrong" in either slide form or video. He'll have a new edition of sudo Mastery out sometime maybe this year, but that won't help at the moment.
Definitely looking forward these news...
 
Old 04-22-2019, 09:20 AM   #4
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,727

Rep: Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211Reputation: 2211
Quote:
Originally Posted by thomasbb View Post
Hello,

The computer I work with is connected to a private network. From time to time, I need to update an application like Mozilla or add packages like texlive's.

Is there a solution to have the sudo privileges only on this computer without risks for the rest of the network, so I can update applications and add small packages without calling for the administrator ?
My gut reaction is that if you have an administrator, that'd be who to ask this question of. Going around admins can be career-limiting.
 
Old 04-23-2019, 01:23 AM   #5
thomasbb
Member
 
Registered: Mar 2019
Location: Nice
Distribution: Xubuntu
Posts: 123

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by scasey View Post
My gut reaction is that if you have an administrator, that'd be who to ask this question of.
It's a lab, our admin is an engineer and has many things to do...
 
Old 04-23-2019, 01:58 AM   #6
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,848

Rep: Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309Reputation: 7309
Quote:
Originally Posted by thomasbb View Post
It's a lab, our admin is an engineer and has many things to do...
But anyway he can only set it, so you need to ask him. And he will tell you if he could/wanted to do it. (or she...).
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The Ultimate Sudo FAQ — To Sudo Or Not To Sudo? LXer Syndicated Linux News 13 04-13-2013 01:36 AM
You must be a good system administrator before being a network administrator. mohajuice Linux - Certification 5 01-03-2013 12:46 PM
Always give root (sudo) privileges in Ubuntu 11.10? mkirsch72 Linux - General 11 02-16-2012 10:19 PM
How to give Domain Administrator privileges to Root user in Domain Controller Sumitsm Linux - Newbie 12 08-24-2009 12:53 AM
How to give only certain root privileges linuxfia Ubuntu 3 06-01-2009 11:35 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 03:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration