Why a user isn't opening by its own name while giving it root privileges ?

Rickkkk · 01-27-2017, 08:03 AM

Quote:

Originally Posted by sunilchand

Yes, I understand that it's not good to change uid and gid value. It's rather to choose "Sudoers" file for the same.I have changed privilege of any user by editing this User1 ALL= (ALL: ALL) ALL.. Something like that.. But I want this command for some specific command not for all command.. How to do that?

Hi again sunilchand ... The usual way to use sudo is with the wheel group. Any user you want to be able to use the sudo command should be added to the group named "wheel". Then, edit the sudoers file (be careful to follow your distro's instructions on how to do this - should only be done with the visudo command) and uncomment the line giving members of the wheel group sudo privileges. This makes it easier thereafter to manage users' sudo privileges by simply adding them or deleting them from the wheel group.

Hope this helps.

Cheers :-)

suicidaleggroll · 01-27-2017, 09:29 AM

Quote:

Originally Posted by Rickkkk

Hi again sunilchand ... The usual way to use sudo is with the wheel group. Any user you want to be able to use the sudo command should be added to the group named "wheel". Then, edit the sudoers file (be careful to follow your distro's instructions on how to do this - should only be done with the visudo command) and uncomment the line giving members of the wheel group sudo privileges. This makes it easier thereafter to manage users' sudo privileges by simply adding them or deleting them from the wheel group.

Hope this helps.

Cheers :-)

He said he wants to give sudo permission for a specific command, not all commands. The entire concept of giving a regular user unlimited sudo access is a security problem and should be avoided, "wheel" group or otherwise.

OP - There are hundreds of guides online that go through the sudo syntax, any one of which should let you accomplish your goal. Eg:
http://unix.stackexchange.com/questi...-to-add-a-user

Rickkkk · 01-27-2017, 10:26 AM

Quote:

Originally Posted by suicidaleggroll

He said he wants to give sudo permission for a specific command, not all commands. The entire concept of giving a regular user unlimited sudo access is a security problem and should be avoided, "wheel" group or otherwise.

OP - There are hundreds of guides online that go through the sudo syntax, any one of which should let you accomplish your goal. Eg:
http://unix.stackexchange.com/questi...-to-add-a-user

suicidaleggroll ... I was approaching the OP's question with the understanding that the user for which the sudo access was required was not a "regular" user, but someone with an administrator role. If I misinterpreted the issue and this is not the case, I agree with your point.

Cheers,

suicidaleggroll · 01-27-2017, 01:11 PM

Quote:

Originally Posted by Rickkkk

suicidaleggroll ... I was approaching the OP's question with the understanding that the user for which the sudo access was required was not a "regular" user, but someone with an administrator role.

By "regular user" I mean a regular user account, aka anyone other than root. It doesn't matter if the person in control of that account is a user or an admin. There are special safeguards in place to lock down the root account, these safeguards do not apply to user accounts. Things like refusing to run web browsers as root, refusing to log into the GUI as root, disabled remote SSH access to the root account, etc. When a user account has full sudo access, they essentially become root, and these safeguards become null and void.

Rickkkk · 01-27-2017, 03:21 PM

Quote:

Originally Posted by suicidaleggroll

By "regular user" I mean a regular user account, aka anyone other than root. It doesn't matter if the person in control of that account is a user or an admin. There are special safeguards in place to lock down the root account, these safeguards do not apply to user accounts. Things like refusing to run web browsers as root, refusing to log into the GUI as root, disabled remote SSH access to the root account, etc. When a user account has full sudo access, they essentially become root, and these safeguards become null and void.

Well explained, thanks - I was not thinking of those particular safeguards when responding.

Cheers :-)

Ratamahatta · 01-27-2017, 08:09 PM

Funny... found this: Setting up user to use sudo for specific commands - What a strange website!

AwesomeMachine · 01-27-2017, 10:01 PM

I didn't know you can have two root accounts. There's a man file for 'sudoers'. It's worth reading.