Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Help with sudoers file - AIX
Special Forums Cybersecurity Help with sudoers file - AIX Post 302594891 by victorbrca on Wednesday 1st of February 2012 11:57:34 AM
Old 02-01-2012
Help with sudoers file - AIX
Hi all,

I'm trying to setup my sudoer file at work to have the right security, but I'm not able to refine to the level I want.

Here's what I would like to have:

=> OS Users
- John (group staff)
- Bob (group staff)
- app20adm (group app20grp)
- app70adm (group app70grp)
- sys20adm (group app20grp)
- sys70adm (group app70grp)

=> OS Groups
- staff
- app20grp
- app70grp

I would like to have John run all sudo commands as sys20adm and sys70adm, including 'sudo -i'. Files should have permission of sys20adm:app20grp or sys70adm:app70grp

I also would like to have Bob run all sudo commands as app20adm and app70adm, except 'sudo -i'.

I haven't been able to get not even the first part (run command as). Can anyone help? Here's what I have configured so far:

Code:
User_Alias SYSADMIN20 = john
User_Alias SYSADMIN70 = john
User_Alias APPADMIN20 = bob
User_Alias APPADMIN70 = bob

Runas_Alias     SYS20ADM = sys20adm
Runas_Alias     SYS70ADM = sys70adm
Runas_Alias     APP20ADM = app20adm
Runas_Alias     APP70ADM = app70adm

SYSADMIN20      ALL = (SYS20ADM) ALL
SYSADMIN70      ALL = (SYS70ADM) ALL
APPADMIN20      ALL = (APP20ADM) ALL , !/usr/bin/sudo -i app20adm
APPADMIN70      ALL = (APP70ADM) ALL , !/usr/bin/sudo -i app70adm

Any ideas? I also tried the defaults below, be the later overwrites the first.

Code:
Defaults:SYSADMIN20    runas_default=sys20adm
Defaults:SYSADMIN70    runas_default=sys70adm

Thanks,
Vic.
 

10 More Discussions You Might Find Interesting

1. Linux

sudoers file

Hi, I have edited 'sudoers' file to allow 'cads' user shutdown the system without providing a password. Can someone tell me what's wrong with my file? It's not working when I 'sudo SHUTDOWN' command: sudo: SHUTDOWN: command not found Thanks a lot! # Host alias specification... (4 Replies)
Discussion started by: whatisthis
4 Replies

2. UNIX for Dummies Questions & Answers

sudoers file questions

What is the difference between ALL and localhost in the bellow? # %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom # %users localhost=/sbin/shutdown -h now Thank you. (2 Replies)
Discussion started by: hemangjani
2 Replies

3. UNIX for Advanced & Expert Users

sudoers file

i have defined a rule in the sudoers file so a specific user is able to run some commands as sudo with no password. my question is: is it possible to restrict a user to run commands as sudo only in a certain directory? for example: chown only the files that are located in /var/tmp. Thank you. ... (2 Replies)
Discussion started by: noam128
2 Replies

4. AIX

Sudoers Installation in AIX

1. Download the rpm file needed to install the sudoers package in AIX AIX open sources rpms Search for the file sudo-1.6.7p5-3.aix5.1.ppc.rpm and download it 2. Copy the downloaded file to the AIX servers /tmp/SUDO directory 3. change the permission to chmod 777 <Filename> 4.smitty install->... (4 Replies)
Discussion started by: Sounddappan
4 Replies

5. Shell Programming and Scripting

Issue with sudoers file.

Hi All, I am new to sudoers file. I am asked to troubleshoot why a particular user (alandhi) is not able to run a script as a different user(scmtg). I have the following line in my sudoers file and the user's name added to the group. User_Alias QA_USERS = alandhi, testuser1, qauser3 ... (3 Replies)
Discussion started by: Tuxidow
3 Replies

6. Shell Programming and Scripting

Scripting help with Sudoers file

Hello, Recently our team noticed access to groups had not been revoked per sudo file. We currently have around 160 AIX LPARS. I am hoping someone can help me write a script that would copy all sudoers file at each machine and dump into 1 large file for me to review. I have public... (1 Reply)
Discussion started by: audis$
1 Replies

7. UNIX for Dummies Questions & Answers

Pls. help with sudoers file...

Hi, I was asked to create sudoers file for operation team so they can sudo as another user and run few commands. I have updated /etc/sudoers file. User_Alias LEVEL1 = JamesF, dennisW, juanC, steveS, Cmnd_Alias SU_PROD=/bin/su prod, /bin/su - prod Cmnd_Alias SU_NYOP=/bin/su... (2 Replies)
Discussion started by: samnyc
2 Replies

8. Emergency UNIX and Linux Support

Getting details from sudoers file

Hi, I need the details of which ids belong to the sudoers file, and which groups these ids belong to. Can anyone suggest a way to derive that information into a flat file please? G (4 Replies)
Discussion started by: ggayathri
4 Replies

9. UNIX for Dummies Questions & Answers

Help with Sudoers file

Hi using Solaris 10. trying to update /etc/sudoers file I need to add all the fist level operation team. This is what I have but it doesn't seem to work. Please help.Error message sudo su - >>> sudoers file: parse error, line 9 <<< >>> sudoers file: parse error, line 9 <<< ... (2 Replies)
Discussion started by: samnyc
2 Replies

10. Solaris

Sudoers file

In the sudoers file in Solaris... I am trying to limit the DEVELOPER user privileges to where those users can only use the “rm” command in certain directories. This is to prevent them from deleting directories or files and destroying a server. I want them to be able to use the "rm" command but... (1 Reply)
Discussion started by: nzonefx
1 Replies

LEARN ABOUT SUNOS

groups

groups(1)							   User Commands							 groups(1)

NAME

       groups - print group membership of user

SYNOPSIS

       groups [user...]

DESCRIPTION

       The  command groups prints on standard output the groups to which you or the optionally specified user belong. Each user belongs to a group
       specified in  /etc/passwd and possibly to other groups as specified in  /etc/group. Note that  /etc/passwd specifies the numerical ID (gid)
       of the group. The groups command converts gid to the group name in the output.

EXAMPLES

       The output takes the following form:

	      example% groups tester01 tester02
	      tester01 : staff
	      tester02 : staff
	      example%

FILES

       /etc/passwd

       /etc/group

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWcsu			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       group(4), passwd(4), attributes(5)

SunOS 5.10							    14 Sep 1992 							 groups(1)
All times are GMT -4. The time now is 05:19 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy