Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Deny to edit a specific file in sudoers Post 302764785 by fpmurphy on Friday 1st of February 2013 01:56:41 AM
Old 02-01-2013
The short answer is no. This is because of your proposed security model, i.e. allow the editing of all files except for a small number of files. This is sometimes known as a "mostly open" security model. A better approach in this case is to use a "mostly closed" model, i.e. deny permission to edit all files except for a small number of files.
 

10 More Discussions You Might Find Interesting

1. Linux

sudoers file

Hi, I have edited 'sudoers' file to allow 'cads' user shutdown the system without providing a password. Can someone tell me what's wrong with my file? It's not working when I 'sudo SHUTDOWN' command: sudo: SHUTDOWN: command not found Thanks a lot! # Host alias specification... (4 Replies)
Discussion started by: whatisthis
4 Replies

2. UNIX for Advanced & Expert Users

deny deletion of a file without omiting w permission

how to forbid deleting a file even though the file is owned by the user? I thought of setfacl command on solaris. Any hints please? thx (2 Replies)
Discussion started by: melanie_pfefer
2 Replies

3. UNIX for Dummies Questions & Answers

sudoers file questions

What is the difference between ALL and localhost in the bellow? # %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom # %users localhost=/sbin/shutdown -h now Thank you. (2 Replies)
Discussion started by: hemangjani
2 Replies

4. AIX

Does ACL can only grant/deny access for specific command?

Dear AIX/UNIX experts: I have a demand to restricted a file to be copy by others, but this file must can be read by others/Applications. As I tried, the chmod command cannot fulfill this requirement. But not sure if the ACL can achieve this function or not ? Could anybody give me your... (8 Replies)
Discussion started by: devyfong
8 Replies

5. UNIX for Advanced & Expert Users

sudoers file

i have defined a rule in the sudoers file so a specific user is able to run some commands as sudo with no password. my question is: is it possible to restrict a user to run commands as sudo only in a certain directory? for example: chown only the files that are located in /var/tmp. Thank you. ... (2 Replies)
Discussion started by: noam128
2 Replies

6. Shell Programming and Scripting

How to edit specific variable in file?

HI guys i have a question. Question 1: how do i modify a particular string? e.g echo "Please enter Book Title: " read a echo "Please enter Author: " read b if ] then echo " Record found!" which will then pop out a menu with the follow output 1. Update Name 2.... (1 Reply)
Discussion started by: ichar
1 Replies

7. Shell Programming and Scripting

Edit file content at the specific line.

How to edit file content at the specific line? For example at below The things to edit --> This is line 2. And it is below line 1. This is line 1. This is line 2. # i want to append some words at this row line. How? This is line 3. (8 Replies)
Discussion started by: alvin0618
8 Replies

8. HP-UX

Unable to edit the sudoers file using script

Hi All, I've made a script in order to delete the users. The script is deleting the users and removing its entry from the /etc/sudoers however it is changing the permissions of the /etc/sudoers file to the user from which it is executing the script. #!/bin/ksh #set -x print "The script... (2 Replies)
Discussion started by: Kits
2 Replies

9. UNIX for Dummies Questions & Answers

Help with Sudoers file

Hi using Solaris 10. trying to update /etc/sudoers file I need to add all the fist level operation team. This is what I have but it doesn't seem to work. Please help.Error message sudo su - >>> sudoers file: parse error, line 9 <<< >>> sudoers file: parse error, line 9 <<< ... (2 Replies)
Discussion started by: samnyc
2 Replies

10. Solaris

Sudoers file

In the sudoers file in Solaris... I am trying to limit the DEVELOPER user privileges to where those users can only use the “rm” command in certain directories. This is to prevent them from deleting directories or files and destroying a server. I want them to be able to use the "rm" command but... (1 Reply)
Discussion started by: nzonefx
1 Replies
CONFIG-MODEL-EDIT(1p)					User Contributed Perl Documentation				     CONFIG-MODEL-EDIT(1p)

NAME
config-model-edit - Graphical model editor for Config::Model SYNOPSIS
config-model-edit [options] -model Sshd [ class:Sshd element:Foo ... ] # plugin mode config-model-edit [options] -model Debian::Dpkg -plugin-file dpkg-snippet.pl DESCRIPTION
config-model-edit will provides a Perl/Tk graphical interface to edit configuration models that will be used by Config::Model. Config::Model is a general purpose configuration framework based on configuration models (See Config::Model for details). This configuration model is also expressed as structured data. This structure data is structured and follow a set of rules which are described for humans in Config::Model. The structure and rules documented in Config::Model are also expressed in a model in the files provided with Config::Model::Itself. Hence the possibity to verify, modify configuration data provided by Config::Model can also be applied on configuration models using the same user interface as config-edit. The model editor program is config-model-edit. USAGE
"config-model-edit" will read and write model file from "./lib/Config/Model/models". When you specify a "-model" options, only configuration models matching this options will be loaded. I.e. config-model-edit -model Xorg will load models "Xorg" (file "Xorg.pl") and all other "Xorg::*" like "Xorg::Screen" (file "Xorg/Screen.pl"). Options -model Mandatory option that specifies the configuration model to be edited. -plugin-file foo.pl this option can be used to create model plugins. A model plugin is an addendum to an existing model. The resulting file will be saved in a ".d" directory besides the original file to be taken into account. For instance: $ config-model-edit -model Debian::Dpkg -plugin-file my-plugin.pl # perform additions to Debian::Dpkg and Debian::Dpkg::Control::Source and save $ find lib -name my-plugin.pl lib/Config/Model/models/Debian/Dpkg.d/my-plugin.pl lib/Config/Model/models/Debian/Dpkg/Control/Source.d/my-plugin.pl -trace Provides a full stack trace when exiting on error. -force-load Load file even if error are found in data. Bad data are loaded, but should be cleaned up before saving the model. See menu "File -> check" in the GUI. -dot-diagram Returns a dot file that represent the stucture of the configuration model. "include" are represented by solid lines. Class usage (i.e. "config_class_name" parameter) is represented by dashed lines. The name of the element is attached to the dashed line. -dump [ file ] Dump configuration content on STDOUT or in the specified with Config::Model syntax. By default, dump only custom values, i.e. different from application built-in values or model default values. See -dumptype option for other types of dump -dumptype [ full | preset | custom ] Choose to dump every values (full), only preset values or only customized values (default) -load <cds_file_to_load> | - Load model from cds file (using Config::Model serialisation format, typically done with -dump option). This option can be used with "-save" to directly save a model loaded from the cds file or from STDIN. -load-yaml <yaml_file_to_load> | - Load configuration data in model from YAML file. This option can be used with "-save" to directly save a model loaded from the YAML file or from STDIN. -dump_yaml Dump a model in YAML format -save Force a save of the model even if no edition was done. This option is useful to migrate a model when Config::Model model feature changes. -dir Directory where to read and write model -open-item 'path' In graphical mode, force the UI to open the node specified. E.g. -open_item 'class:Fstab::FsLine element:fs_mntopts rules' LOGGING
All Config::Model logging was moved from klunky debug and verbose prints to Log::Log4perl. Logging can be configured in the following files: o ~/.log4config-model o /etc/log4config-model.conf Without these files, the following Log4perl config is used: log4perl.logger=WARN, Screen log4perl.appender.Screen = Log::Log4perl::Appender::Screen log4perl.appender.Screen.stderr = 0 log4perl.appender.Screen.layout = Log::Log4perl::Layout::PatternLayout log4perl.appender.Screen.layout.ConversionPattern = %d %m %n Log4Perl categories are shown in "LOGGING" in config-edit AUTHOR
Dominique Dumont, ddumont at cpan dot org SEE ALSO
Config::Model, Config::Model::Node, Config::Model::Instance, Config::Model::HashId, Config::Model::ListId, Config::Model::WarpedNode, Config::Model::Value perl v5.14.2 2012-06-22 CONFIG-MODEL-EDIT(1p)
All times are GMT -4. The time now is 07:10 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy