Alternatives for sudo?? Post: 302442088

Sponsored Content

Operating Systems Linux Red Hat Alternatives for sudo?? Post 302442088 by pludi on Tuesday 3rd of August 2010 09:00:28 AM

08-03-2010

Registered User

Define "it's not working". What error message are you getting (if any)?

Example sudoers entry:

Code:

pludi ALL = (root) NOPASSWD: /usr/bin/id

Usage:

Code:

$ sudo -l
User pludi may run the following commands on this host:
    (ALL) ALL
    (root) ALL
    (root) NOPASSWD: /usr/bin/id
$ id
uid=1002(pludi) gid=100(users) groups=10(wheel),16(dialout),33(video),100(users)
$ sudo id
uid=0(root) gid=0(root) groups=0(root)
$ sudo /bin/echo Test
pludi's password:
Test

---------- Post updated at 15:00 ---------- Previous update was at 14:57 ----------

Quote:

Originally Posted by hergp

@Pludi: growisofs does not run under sudo by design for security reasons, because it can be abused to execute arbitrary programs with elevated privileges, as stated in the man page.

True, didn't see that, thanks for pointing it out. But in the same section it presents a wrapper script that can be used in place of the real executable, as well as the recommendation to change it to SUID, as it will drop the privileges itself. That way, neither sudo nor ssh are needed.

Quote:

But note that the recommended alternative to the above "workaround" is actually to install growisofs set-root-uid, in which case it will drop privileges prior accessing data or executing mkisofs in order to preclude unauthorized access to the data.

pludi

View Public Profile for pludi

Find all posts by pludi

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

ASP alternatives

I have just found out that a project I have developed in ASP (ultradev) needs to be migrated to a unix server and won't be able to support asp. Can anyone point me in the right direction to see what my options are with Unix? I have never worked with or developed for a Unix box before. Also,...

2. UNIX for Advanced & Expert Users

Alternatives for CLOCK_MONOTONIC

Hi, I need to develop timeout functionality in my code, which is not affected by system's time changes.Unfortunately I dont have CLOCK_MONOTONIC support in my OS. Are there any alternatives?

3. Linux

ntop/Nmon alternatives

Hi folks, Any folk has experience on ntop/Nmon ntop - network top and its spinoff NMON Welcome to nmon.net Nmon Nmon - Wikipedia, the free encyclopedia nmon for AIX and Linux Performance Monitoring IBM Wikis - AIX 5L Wiki - nmon A free tool to analyze AIX and Linux...

4. Shell Programming and Scripting

Alternatives utilities to rsync

Hi, I am using rsync to copy files and links from one server to other (backup server). The problem with rsync is that it is not copying the files and links in the order which i have mentioned. It is sorting in alphabetical order before it is copying the files and links. I want a utilty that...

5. Shell Programming and Scripting

ssh foo.com sudo command - Prompts for sudo password as visible text. Help?

I am writing a BASH script to update a webserver and then restart Apache. It looks basically like this: #!/bin/bash rsync /path/on/local/machine/ foo.com:path/on/remote/machine/ ssh foo.com sudo /etc/init.d/apache2 reloadrsync and ssh don't prompt for a password, because I have DSA encryption...

6. Shell Programming and Scripting

Sed -f alternatives?

I have a list of items (control file) that I want to substitute in a text file, and it's BIG. The file has two items, the original, and the new: A B B C D E The file has something like 10,000 entries. So in the oldfile.txt, I'd like to basically make all these expression matched...

7. UNIX for Advanced & Expert Users

SSH alternatives

Hi, I am using SSH to execute unix commands on remote machines. But, SSH will be diabled soon and I am looking for other alternatives to execute remote scripts/commands, without SSH . any suggestions or workarounds with out SSH for remote program executions ? Thanks in advance.

8. Shell Programming and Scripting

Alternatives to Expect

Are there any other alternatives to using Expect script? Can functionality provided by Expect be achieved by any other scripting language?

9. UNIX for Dummies Questions & Answers

Find command alternatives

Hi is there an alternative other than the find command to get the size of files which are 10 days older ? I already use a script with find command find . -mtime +10. However would want to have an alternative script to find the size of files which are over 10 days. Let me know if you...

10. Shell Programming and Scripting

Builtin alternatives for several commands?

I'm adapting a BASH script to run with an absolute minimal amounts of Cygwin64 files so colleagues using Windows can use it without installing Cygwin. I am down to the following in /bin only (replacing cut with parameter substitution eliminated all needed things in /etc) bash.exe cygattr-1.dll...

LEARN ABOUT DEBIAN

eventstat

EVENTSTAT(8)						      System Manager's Manual						      EVENTSTAT(8)

NAME

       eventstat - a tool to measure system events.

SYNOPSIS

       eventstat [-rcsv_file][-nevent_count][delay [count]]

DESCRIPTION

       eventstat is a program that dumps the current active system events.

OPTIONS

       eventstat options are as follow:

       -h     show help

       -n event_count
	      only display the first event_count number of top events.

       -q     run quietly, only really makes sense with -r option.

       -r csv_file
	      output gathered data in a comma separated values file. This can be then imported and graphed using your favourite open source spread
	      sheet.

       -t threshold
	      ignore samples where the event delta per second less than the given threshold

EXAMPLES

       Dump events every second until stopped.
	       sudo eventstat

       Dump the top 20 events every 60 seconds until stopped.
	       sudo eventstat -n 20 60

       Dump events every 10 seconds just 5 times.
	       sudo eventstat 10 5

SEE ALSO

       powertop(8)

AUTHOR

       eventstat was written by Colin King <colin.king@canonical.com>

       This manual page was written by Colin King <colin.king@canonical.com>, for the Ubuntu project (but may be used by others).

								   June 13, 2012						      EVENTSTAT(8)

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

ASP alternatives

Discussion started by: Ricki

2. UNIX for Advanced & Expert Users

Alternatives for CLOCK_MONOTONIC

Discussion started by: amitks21

3. Linux

ntop/Nmon alternatives

Discussion started by: satimis

4. Shell Programming and Scripting

Alternatives utilities to rsync

Discussion started by: vvenu88