SUDO permission setup on particular dir , recursive

alok.rhct · 05-06-2010, 05:08 AM

Hi,
I am looking for a way to setup sudo access for a user, so that he can change permission of all files of the given dir.

eg:
userA /bin/chown -[vR] [a-z]\:[a-z] /etc/userA-conf/*

By this user can change ownership of files which are on depth bellow to given dir (i.e /etc/userA-conf/), but while trying to change permission of /etc/userA-conf/../user-conf2 , getting error,
user userA don;t have that permission.

Let me know what will be the right regex/pattern to achieve this.
In Solaris it's working fine, but I am trying it on Linux RHEL5.

Let me know in case some more details is required to understand this my issue.

Thanks
Alok

centosboy · 05-07-2010, 09:49 AM

Quote:

Originally Posted by alok.rhct

Hi,
I am looking for a way to setup sudo access for a user, so that he can change permission of all files of the given dir.

eg:
userA /bin/chown -[vR] [a-z]\:[a-z] /etc/userA-conf/*

By this user can change ownership of files which are on depth bellow to given dir (i.e /etc/userA-conf/), but while trying to change permission of /etc/userA-conf/../user-conf2 , getting error,
user userA don;t have that permission.

Let me know what will be the right regex/pattern to achieve this.
In Solaris it's working fine, but I am trying it on Linux RHEL5.

Let me know in case some more details is required to understand this my issue.

Thanks
Alok

Code:

## Command Aliases
## These are groups of related commands...
Cmnd_Alias CHMOD = /bin/chmod

and

Code:

## The COMMANDS section may have other options added to it.
##
## Allow root to run any commands anywhere
root    ALL=(ALL)       ALL
user   ALL = CHMOD

centosboy · 05-07-2010, 10:01 AM

i need to correct the above post.

you would have to add

Code:

Cmnd_Alias CHMOD = /bin/chmod permissions /directory/*, Cmnd_Alias CHMOD = /bin/chmod * /directory/*

for any instance of the chmod command to be ran by the particular user.
there is possibly a shorter way, but i have tested this way and it works.

alok.rhct · 05-18-2010, 06:32 AM

Quote:

Originally Posted by centosboy

i need to correct the above post.

you would have to add

Code:

Cmnd_Alias CHMOD = /bin/chmod permissions /directory/*, Cmnd_Alias CHMOD = /bin/chmod * /directory/*

for any instance of the chmod command to be ran by the particular user.
there is possibly a shorter way, but i have tested this way and it works.

Sure i will try that..

I've managed it by putting exact user and group name for chown.

I will try it by replacing them with * . Hope it will allow user to set ownership to any on given dir.

Thanks for your time..