I'd recommend being really careful about what's in abc.jar and/or which abc.jar the user is allowed to run under sudo.
Because anyone who knows even a little Java programming will be able to create a JAR file that does anything they want. Allowing sudo access to Java is awfully close to giving the users full access to root if they want it.
You're probably a lot better off writing a wrapper script, limiting write access to that script to root only, making sure the environment variables are all clean, and then giving sudo access to that wrapper script instead of allowing sudo to run Java directly.
These 2 Users Gave Thanks to achenle For This Post:
Having a "running low on coffee" moment here & need help.
On HP 11.11 where is the sudoers file located; I looked every place I could think of and don't see it.
Thanks in advance:confused: (2 Replies)
We have users that have a # in their username. Sudo is working on some servers and not others. I have narrowed it down to the # in their username. Any suggestions or ideas why it is working on 1 server but not another.
Server not working is - Solaris 10 patch level 138888-01
Server working is ... (1 Reply)
i just installed/configured apache2.0 on my own aix5.3 mini server. i can start/stop apache by root, but i want to start it under my login id(admin) instead.
i need to execute this command:
/usr/bin/sudo /usr/IBM/HTTPServer/bin/apachectl stop/start. (5 Replies)
i have defined a rule in the sudoers file so a specific user is able to run some commands as sudo with no password.
my question is: is it possible to restrict a user to run commands as sudo only in a certain directory? for example: chown only the files that are located in /var/tmp.
Thank you.
... (2 Replies)
this is for the first time i am going to use sudoers i want know how to create sudoers and giving privileges for that users
thanks in advance
dinu (6 Replies)
what is the configuration file for sudo? can we edit it as like other file or will it create any adverse effect on editing that file?
thanks in advance
dinu (1 Reply)
Dear folks.
Considering PCIDSS standards, i have requirment to use sudo(ers) to log everything a certain user executes with root privileges.
Now, for an admin it's just a pain in the ass to prefix every command with sudo.
Only way i can think of is making .aliases and with some awk magic... (6 Replies)
Hi
using Solaris 10. trying to update /etc/sudoers file
I need to add all the fist level operation team. This is what I have but it doesn't seem to work. Please help.Error message
sudo su -
>>> sudoers file: parse error, line 9 <<<
>>> sudoers file: parse error, line 9 <<<
... (2 Replies)
In our servers we don't have proper groups and No active Directory.
We are adding Users locally and providing users a public key, that's the way they can connect to the servers using .ppk file.
My manager ask me to prompt for a password based login when they try for Sudo. (Currently it was set... (1 Reply)
In the sudoers file in Solaris...
I am trying to limit the DEVELOPER user privileges to where those users can only use the “rm” command in certain directories. This is to prevent them from deleting directories or files and destroying a server. I want them to be able to use the "rm" command but... (1 Reply)
Discussion started by: nzonefx
1 Replies
LEARN ABOUT DEBIAN
airport-hostmon
AIRPORT-HOSTMON(1) General Commands Manual AIRPORT-HOSTMON(1)NAME
airport-hostmon - Host monitor for the original Apple AirPort Base Station ("Graphite"), the Lucent RG-1000 base station and the Apple Air-
Port Extreme Base Station
SYNOPSIS
airport-hostmon
DESCRIPTION
airport-hostmon allows you to monitor the wireless hosts associated to your base station.
OPTIONS
airport-hostmon accepts no command-line options. airport-hostmon is a wrapper script around the HostMonitor.jar jar file located in
/usr/share/java/airport-utils.
You can set the JAVACMD environment variable to use a specific JVM instead of the one chosen by the wrapper script. Set the DEBUG environ-
ment variable to 1 to get the debug output from the wrapper script.
ENVIRONMENT VARIABLES
DEBUG Set this variable to 1 to get the debug output from the wrapper script.
JAVACMD
The full path to the Java Virtual Machine to use. By default, the wrapper uses JAVACMD; if it is not set, it looks for
JAVA_BINDIR/java, then for JAVA_HOME/bin/java before looking for a java executable in the PATH. In the latter case, the JVM used can
be configured using the Debian alternatives system (see update-alternatives(8)).
JAVA_HOME
The full path where your JDK/JRE is installed.
JAVA_BINDIR
The full path to the directory where the java executable is located.
JAVA_ARGS
Extra command-line arguments to be passed to the Java Virtual Machine.
AUTHOR
airport-hostmon was written by Jon Sevy <jsevy@cs.drexel.edu>.
This manual page was written by Julien BLACHE <jblache@debian.org>, for the Debian project (but may be used by others).
May 20, 2006 AIRPORT-HOSTMON(1)