Hi all,

I want to allow to user A the execution of a script from user B, but fixing the first argument (i.e., user A can execute the script ONLY if its first argument is X), and allowing to add 0 or more arguments. I've tried with:

Cmnd_Alias ALIAS1 = /path/to/script X *
A ALL=NOPASSWD: ALIAS1


, but it doesn't work if I pass just the first parameter, and it does work if I pass two or more (it seems like the * means "one or more parameters", instead of "zero or more"). Any hint?

Thanks

* definitely means zero or more. (It's called a Kleene star)

Could you possibly post the actual relevant lines from sudoers?

This is the contents of the sudoers file. scripts 1 to 4 must be executed by USRAPP with the 1st parameter with a fixed value, plus other optional parameters.

Thanks

User_Alias USRAPP = usrapp
User_Alias WAS60 = was60

# Cmnd alias specification
Cmnd_Alias WAS60_CMD = /usr/bin/chown, /usr/bin/chgrp, /usr/bin/mkdir
Cmnd_Alias USRAPP_CMD = \
/path/to/scripts/script1.ksh par1 *,\
/path/to/scripts/script2.ksh par1 *,\
/path/to/scripts/script3.ksh par1 *,\
/path/to/scripts/script4.ksh par2 *

# Runas alias specification
Runas_Alias WAS60 = was60
Runas_Alias ROOT = root

# User privilege specification
root ALL=(ALL) SETENV: ALL

WAS60 ALL=NOPASSWD: WAS60_CMD
USRAPP ALL=(WAS60) NOPASSWD: USRAPP_CMD