I've moved around some of your reply to make it easier to answer.
Quote:
Originally Posted by xpdin
Thank you very much to all for your replies.
Can someone say please, are there any disadvantages or advantages between the next method and the methods from the above posts?
|
If you want a login shell for root, try
sudo -i instead.
Quote:
Originally Posted by xpdin
Create
Code:
/usr/local/bin/scriptname
and write the beyond lines in it:
Code:
#!/bin/bash
command in here without sudo
# the end of the scriptname
Code:
chown root:root /etc/sudoers.d/scriptname
chown root:root /usr/local/bin/scriptname
chmod 0700 /usr/local/bin/scriptname
chmod 0440 /etc/sudoers.d/scriptname
|
Yes, that looks good, depending on the details of the command. You have the script out of the way where only root can change it.
Instead of changing both configuration files, I'd put the following in
/etc/sudoers.d/scriptname and leave
/etc/sudoers alone.
Code:
username ALL=(ALL:ALL) NOPASSWD: /usr/local/bin/scriptname
