04-21-2008
That field in the sudoers file defines which hosts can run the commands. localhost resolves to the server the file is on, ALL allows any server to run the command.
As far as sudo is concerned they will both match the machine you are running sudo on.
ALL is usefull when distributing the sudoers files to a group of machines. Its very clear what the rule's intention is.
10 More Discussions You Might Find Interesting
1. Linux
Hi,
I have edited 'sudoers' file to allow 'cads' user shutdown the system without providing a password.
Can someone tell me what's wrong with my file?
It's not working when I 'sudo SHUTDOWN' command:
sudo: SHUTDOWN: command not found
Thanks a lot!
# Host alias specification... (4 Replies)
Discussion started by: whatisthis
4 Replies
2. UNIX for Advanced & Expert Users
Does anyone know of a utility that can parse through a sudoers file and create an "expansion" dump of all users defined in the User Specification, outputting user, host, and command based on all defined Aliases? (3 Replies)
Discussion started by: jasondavey
3 Replies
3. UNIX for Advanced & Expert Users
i have defined a rule in the sudoers file so a specific user is able to run some commands as sudo with no password.
my question is: is it possible to restrict a user to run commands as sudo only in a certain directory? for example: chown only the files that are located in /var/tmp.
Thank you.
... (2 Replies)
Discussion started by: noam128
2 Replies
4. Cybersecurity
Hi all,
I'm trying to setup my sudoer file at work to have the right security, but I'm not able to refine to the level I want.
Here's what I would like to have:
=> OS Users
- John (group staff)
- Bob (group staff)
- app20adm (group app20grp)
- app70adm (group app70grp)
- sys20adm... (0 Replies)
Discussion started by: victorbrca
0 Replies
5. Shell Programming and Scripting
Hello,
Recently our team noticed access to groups had not been revoked per sudo file.
We currently have around 160 AIX LPARS.
I am hoping someone can help me write a script that would copy all sudoers file at each machine and dump into 1 large file for me to review.
I have public... (1 Reply)
Discussion started by: audis$
1 Replies
6. UNIX for Dummies Questions & Answers
Hi,
I was asked to create sudoers file for operation team so they can sudo as another user and run few commands.
I have updated /etc/sudoers file.
User_Alias LEVEL1 = JamesF, dennisW, juanC, steveS,
Cmnd_Alias SU_PROD=/bin/su prod, /bin/su - prod
Cmnd_Alias SU_NYOP=/bin/su... (2 Replies)
Discussion started by: samnyc
2 Replies
7. Emergency UNIX and Linux Support
Hi,
I need the details of which ids belong to the sudoers file, and which groups these ids belong to.
Can anyone suggest a way to derive that information into a flat file please?
G (4 Replies)
Discussion started by: ggayathri
4 Replies
8. UNIX for Dummies Questions & Answers
Hi
using Solaris 10. trying to update /etc/sudoers file
I need to add all the fist level operation team. This is what I have but it doesn't seem to work. Please help.Error message
sudo su -
>>> sudoers file: parse error, line 9 <<<
>>> sudoers file: parse error, line 9 <<<
... (2 Replies)
Discussion started by: samnyc
2 Replies
9. Solaris
In the sudoers file in Solaris...
I am trying to limit the DEVELOPER user privileges to where those users can only use the “rm” command in certain directories. This is to prevent them from deleting directories or files and destroying a server. I want them to be able to use the "rm" command but... (1 Reply)
Discussion started by: nzonefx
1 Replies
10. UNIX for Beginners Questions & Answers
Hi,
I have several employees of whom we have created Linux user ids as below.
fred
mohtashim
jhon
matt
croft
....
$ id
uid=1018(jhon) gid=1003(techx) groups=1003(techx) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
Note: All my employee users belong to techx... (3 Replies)
Discussion started by: mohtashims
3 Replies
rc0(8) System Manager's Manual rc0(8)
NAME
rc0 - Runs command script executed when stopping the system
SYNOPSIS
rc0
DESCRIPTION
The rc0 script contains run commands that enable a smooth shutdown and bring the system to a single-user state; run levels 0 and s. In
addition to commands listed in within the script itself, rc0 contains instructions to run commands found in the /sbin/rc0.d directory. The
script defines the conditions under which the commands execute; some commands run if the system is being shut down while others run if the
system is being shut down and rebooted to single user.
By convention, files in the /sbin/rc0.d directory begin with either the letter "K" or the letter "S" and are followed by a two-digit number
and a filename, for example: K00enlogin K05lpd K60cron K30nfs
In general, the system starts commands that begin with the letter "S" and stops commands that begin with the letter "K." The numbering of
commands in the /sbin/rc0.d directory is important since the numbers are sorted and the commands are run in ascending order. Files in the
/sbin/rc0.d directory are normally links to files in the /etc/init.d directory.
An entry in the inittab file causes the system to execute the rc0 script, for example: ss:Ss:wait:/sbin/rc0 shutdown < /dev/console >
/dev/console 2>&1 s0:0:wait:/sbin/rc0 off < /dev/console > /dev/console 2>&1
The following operations are typical of those that result from executing the rc0 script and the commands located in the /sbin/rc0.d direc-
tory: Notify users that the system is shutting down. Sync the disks Stop system services and daemons Stop processes Kill processes Unmount
file systems Invoke init if the system is being shut down to single user
The killall command sends a SIGTERM signal to stop running processes; SIGKILL follows to kill all processes except the process which initi-
ated the call. The umount -a command unmounts all file systems except the root file system.
FILES
Specifies the command path Specifies the directory of commands that corresponds to the run level
RELATED INFORMATION
Commands: init(8), killall(8), rc2(8), rc3(8), shutdown(8) delim off
rc0(8)