I'd recommend being really careful about what's in abc.jar and/or which abc.jar the user is allowed to run under sudo.
Because anyone who knows even a little Java programming will be able to create a JAR file that does anything they want. Allowing sudo access to Java is awfully close to giving the users full access to root if they want it.
You're probably a lot better off writing a wrapper script, limiting write access to that script to root only, making sure the environment variables are all clean, and then giving sudo access to that wrapper script instead of allowing sudo to run Java directly.
These 2 Users Gave Thanks to achenle For This Post:
Having a "running low on coffee" moment here & need help.
On HP 11.11 where is the sudoers file located; I looked every place I could think of and don't see it.
Thanks in advance:confused: (2 Replies)
We have users that have a # in their username. Sudo is working on some servers and not others. I have narrowed it down to the # in their username. Any suggestions or ideas why it is working on 1 server but not another.
Server not working is - Solaris 10 patch level 138888-01
Server working is ... (1 Reply)
i just installed/configured apache2.0 on my own aix5.3 mini server. i can start/stop apache by root, but i want to start it under my login id(admin) instead.
i need to execute this command:
/usr/bin/sudo /usr/IBM/HTTPServer/bin/apachectl stop/start. (5 Replies)
i have defined a rule in the sudoers file so a specific user is able to run some commands as sudo with no password.
my question is: is it possible to restrict a user to run commands as sudo only in a certain directory? for example: chown only the files that are located in /var/tmp.
Thank you.
... (2 Replies)
this is for the first time i am going to use sudoers i want know how to create sudoers and giving privileges for that users
thanks in advance
dinu (6 Replies)
what is the configuration file for sudo? can we edit it as like other file or will it create any adverse effect on editing that file?
thanks in advance
dinu (1 Reply)
Dear folks.
Considering PCIDSS standards, i have requirment to use sudo(ers) to log everything a certain user executes with root privileges.
Now, for an admin it's just a pain in the ass to prefix every command with sudo.
Only way i can think of is making .aliases and with some awk magic... (6 Replies)
Hi
using Solaris 10. trying to update /etc/sudoers file
I need to add all the fist level operation team. This is what I have but it doesn't seem to work. Please help.Error message
sudo su -
>>> sudoers file: parse error, line 9 <<<
>>> sudoers file: parse error, line 9 <<<
... (2 Replies)
In our servers we don't have proper groups and No active Directory.
We are adding Users locally and providing users a public key, that's the way they can connect to the servers using .ppk file.
My manager ask me to prompt for a password based login when they try for Sudo. (Currently it was set... (1 Reply)
In the sudoers file in Solaris...
I am trying to limit the DEVELOPER user privileges to where those users can only use the “rm” command in certain directories. This is to prevent them from deleting directories or files and destroying a server. I want them to be able to use the "rm" command but... (1 Reply)
Discussion started by: nzonefx
1 Replies
LEARN ABOUT DEBIAN
mh_installjar
MAVEN(1) User Commands MAVEN(1)NAME
Maven - Installs a jar into /usr/share/maven-repo.
SYNOPSIS
mh_installjar [option]... [pom] [jar] [link]...
DESCRIPTION
Installs the jar file in /usr/share/maven-repo, at the correct location for Maven. The jar is copied into the build directory. It can also
create additional links to the jar, usually located in /usr/share/java.
Where
[pom] is the location of the POM associated with the jar to install.
GroupId, artifactId and version will be extracted from this file.
[jar] is the path to the jar to install, usually located in the build
folder.
[link] is an additional link to the jar to install, usually there should
be a link to usr/share/java/$jar.jar and usr/share/java/$jar-$version.jar to comply with the Java packaging guidelines. Note that
there is no need to specify those particular links if the --java-lib option is used.
OPTIONS -h --help: show this text
-V --version: show the version
-p<package> --package=<package>: name of the Debian package which
will contain this jar file
-e<version>, --set-version=<version>: set the version for the jar,
do not use the version declared in the POM file.
-r<rules> --rules=<rules>: path to the file containing the
rules to apply when cleaning the POM. Optional, the default location is debian/maven.rules Maven rules are used here to extract the
groupId, artifactId and version from the POM file.
-l --java-lib: Optional, if given it will install the jar into
/usr/share/java to comply with the Debian Java specification. The jar will be installed as /usr/share/java/$name-$version.jar and a
versionless link /usr/share/java/$name.jar will point to it, as well as the links installed in /usr/share/maven-repo
-n<name> --usj-name=<name>: Optional, the name to use when installing the
library in /usr/share/java when --java-lib is used. Defaults to the artifact id found in the POM.
-j<version> --usj-version=<version>: Optional, the version to use when
installing the library in /usr/share/java when --java-lib is used. Defaults to the version found in the POM.
-s --no-usj-versionless: Optional, don't install the versionless link
in /usr/share/java. This flag is used only when the -l or --java-lib option is given.
-d<path> --dest-jar=<path>: Optional, the destination for the real jar.
The other places where the jar appears, in the repository or in the list of links, will be symlinks to this jar. Defaults to
/usr/share/java/$name-$version.jar if --java-lib is used, otherwise the jar is installed in the versioned path in the Maven reposi-
tory.
-c<classifier> --classifier=<classifier>: Optional, the classifier for
the jar. Empty by default.
-v --verbose: show more information while running
-n --no-act: don't actually do anything, just print the results
--skip-clean-pom: don't clean the pom, assume that a previous action ran
mh_cleanpom with the correct options. mh_cleanpom is run only to extract the groupId, artifactId and version of the jar
See also: mh_installpom(1), mh_installsite(1)Maven Repo Helper version 1.7.1 January 2012 MAVEN(1)