Alternatives for sudo?? Post: 302442088

Sponsored Content

Operating Systems Linux Red Hat Alternatives for sudo?? Post 302442088 by pludi on Tuesday 3rd of August 2010 09:00:28 AM

08-03-2010

Registered User

Define "it's not working". What error message are you getting (if any)?

Example sudoers entry:

Code:

pludi ALL = (root) NOPASSWD: /usr/bin/id

Usage:

Code:

$ sudo -l
User pludi may run the following commands on this host:
    (ALL) ALL
    (root) ALL
    (root) NOPASSWD: /usr/bin/id
$ id
uid=1002(pludi) gid=100(users) groups=10(wheel),16(dialout),33(video),100(users)
$ sudo id
uid=0(root) gid=0(root) groups=0(root)
$ sudo /bin/echo Test
pludi's password:
Test

---------- Post updated at 15:00 ---------- Previous update was at 14:57 ----------

Quote:

Originally Posted by hergp

@Pludi: growisofs does not run under sudo by design for security reasons, because it can be abused to execute arbitrary programs with elevated privileges, as stated in the man page.

True, didn't see that, thanks for pointing it out. But in the same section it presents a wrapper script that can be used in place of the real executable, as well as the recommendation to change it to SUID, as it will drop the privileges itself. That way, neither sudo nor ssh are needed.

Quote:

But note that the recommended alternative to the above "workaround" is actually to install growisofs set-root-uid, in which case it will drop privileges prior accessing data or executing mkisofs in order to preclude unauthorized access to the data.

pludi

View Public Profile for pludi

Find all posts by pludi

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

ASP alternatives

I have just found out that a project I have developed in ASP (ultradev) needs to be migrated to a unix server and won't be able to support asp. Can anyone point me in the right direction to see what my options are with Unix? I have never worked with or developed for a Unix box before. Also,...

2. UNIX for Advanced & Expert Users

Alternatives for CLOCK_MONOTONIC

Hi, I need to develop timeout functionality in my code, which is not affected by system's time changes.Unfortunately I dont have CLOCK_MONOTONIC support in my OS. Are there any alternatives?

3. Linux

ntop/Nmon alternatives

Hi folks, Any folk has experience on ntop/Nmon ntop - network top and its spinoff NMON Welcome to nmon.net Nmon Nmon - Wikipedia, the free encyclopedia nmon for AIX and Linux Performance Monitoring IBM Wikis - AIX 5L Wiki - nmon A free tool to analyze AIX and Linux...

4. Shell Programming and Scripting

Alternatives utilities to rsync

Hi, I am using rsync to copy files and links from one server to other (backup server). The problem with rsync is that it is not copying the files and links in the order which i have mentioned. It is sorting in alphabetical order before it is copying the files and links. I want a utilty that...

5. Shell Programming and Scripting

ssh foo.com sudo command - Prompts for sudo password as visible text. Help?

I am writing a BASH script to update a webserver and then restart Apache. It looks basically like this: #!/bin/bash rsync /path/on/local/machine/ foo.com:path/on/remote/machine/ ssh foo.com sudo /etc/init.d/apache2 reloadrsync and ssh don't prompt for a password, because I have DSA encryption...

6. Shell Programming and Scripting

Sed -f alternatives?

I have a list of items (control file) that I want to substitute in a text file, and it's BIG. The file has two items, the original, and the new: A B B C D E The file has something like 10,000 entries. So in the oldfile.txt, I'd like to basically make all these expression matched...

7. UNIX for Advanced & Expert Users

SSH alternatives

Hi, I am using SSH to execute unix commands on remote machines. But, SSH will be diabled soon and I am looking for other alternatives to execute remote scripts/commands, without SSH . any suggestions or workarounds with out SSH for remote program executions ? Thanks in advance.

8. Shell Programming and Scripting

Alternatives to Expect

Are there any other alternatives to using Expect script? Can functionality provided by Expect be achieved by any other scripting language?

9. UNIX for Dummies Questions & Answers

Find command alternatives

Hi is there an alternative other than the find command to get the size of files which are 10 days older ? I already use a script with find command find . -mtime +10. However would want to have an alternative script to find the size of files which are over 10 days. Let me know if you...

10. Shell Programming and Scripting

Builtin alternatives for several commands?

I'm adapting a BASH script to run with an absolute minimal amounts of Cygwin64 files so colleagues using Windows can use it without installing Cygwin. I am down to the following in /bin only (replacing cut with parameter substitution eliminated all needed things in /etc) bash.exe cygattr-1.dll...

LEARN ABOUT DEBIAN

mtail

MTAIL(1)							   User Commands							  MTAIL(1)

NAME

       mtail - tail variant designed for web developers monitoring logfiles

SYNOPSIS

       mtail [options]	<file>...

DESCRIPTION

       MonkeyTail  allows  a  user to tail multiple files on both local and remote hosts and clearly marks inactivity by putting 5 newlines in the
       output whenever a pause in output over 3 seconds is detected.

       MonkeyTail is implemented a fairly simple wrapper script around standard tail, ssh, and sudo.

OPTIONS

       -q     Quiet mode

       --quiet
	      "    "

       -n     Output the last N lines of each file before tailing (defaults to 0)

       <file>...
	      Files to tail.

	      These can specified in the following ways:

       @<groupname>
	      - expands the group (from .mtailrc) to a list of

	      files to tail

       <filename>
	      - tails a local file.

       +<filename>		- attempts to sudo and tail a local file (will
	      prompt for pwd if required).

       <remotehost>:<filename>
	      - attempts to invoke tail via ssh on a remote

	      host.

       +<remotehost>:<filename> - attempts to invoke sudo tail via ssh on a
	      remote host (will prompt for pwd if required).

SEE ALSO

       mtailrc(5), tail(1)

AUTHOR

       Martyn Smith <martyn@dollyfish.net.nz>

mtail								     May 2008								  MTAIL(1)

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

ASP alternatives

Discussion started by: Ricki

2. UNIX for Advanced & Expert Users

Alternatives for CLOCK_MONOTONIC

Discussion started by: amitks21

3. Linux

ntop/Nmon alternatives

Discussion started by: satimis

4. Shell Programming and Scripting

Alternatives utilities to rsync

Discussion started by: vvenu88