How to give permissions to users to start and stop only one service

anis123 · 10-30-2014, 01:06 AM

Dear All,

I have cadence server and students access this server from vncviewer

now i want to do that when student access server they only start and stop only cadence server.if i place students in visudo than they have full permissions .

cadences start from /root/cadence .i want to do that user only access this directory
please help me in this regard

sag47 · 10-30-2014, 01:14 AM

Quote:

Originally Posted by anis123

now i want to do that when student access server they only start and stop only cadence server.if i place students in visudo than they have full permissions .

Have you read the man page for /etc/sudoers? You can restrict them to executing only a single command rather than completely opening up access. The recommended way is to add permission in /etc/sudoers through group membership (%group entry).

anis123 · 10-30-2014, 01:35 AM

Thanks for reply sag

can i create group and add students in this group and give access to this group on /root/candence

sag47 · 10-30-2014, 11:41 AM

If you have administrator permissions on the box then yes. It is recommended to create a group, add users to the group, and then grant that group sudoers permission to start and stop your cadence service.

If you are not the primary administrator on the system then you should follow any policies your admin has in place. They may even do it for you.

Habitual · 10-30-2014, 06:01 PM

Example of sudo for selective commands

eklavya · 10-31-2014, 12:16 AM

Take a look here.
http://www.golinuxhub.com/2013/12/ho...er-to-run.html