How to give only certain root privileges

linuxfia · 05-29-2009, 12:43 PM

We have Ubuntu 8.0.4.
We'd like to give this one user the ability to reboot the server but no other root privileges.
I'm assuming this can be done using sudo.
What file and what change do I need to make to it?

Thanks!

rweaver · 05-29-2009, 02:17 PM

Quote:

Originally Posted by linuxfia

We have Ubuntu 8.0.4.
We'd like to give this one user the ability to reboot the server but no other root privileges.
I'm assuming this can be done using sudo.
What file and what change do I need to make to it?

Thanks!

Try adding this:

Code:

username ALL=(ALL) /sbin/reboot

to your /etc/sudoers file.

linuxfia · 05-29-2009, 05:37 PM

Thank you!
So if I want the user to be only able to start/stop/restart postfix, is this correct?

Quote:

username ALL=(ALL) /etc/init.d/postfix start

Quote:

username ALL=(ALL) /etc/init.d/postfix stop

Quote:

username ALL=(ALL) /etc/init.d/postfix restart

rweaver · 06-01-2009, 11:35 AM

Quote:

Originally Posted by linuxfia

Thank you!
So if I want the user to be only able to start/stop/restart postfix, is this correct?

I don't think you can specify what postfix commands they could run, just /etc/init.d/postfix and you may get stuck needing to add privileges for other things the postfix script is calling since it's not a binary, but I can't test it right now to be sure.