Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Sudoers
Operating Systems Solaris Sudoers Post 302997770 by achenle on Friday 19th of May 2017 06:52:19 AM
Old 05-19-2017
Code:
sudo java abc.jar

I'd recommend being really careful about what's in abc.jar and/or which abc.jar the user is allowed to run under sudo.

Because anyone who knows even a little Java programming will be able to create a JAR file that does anything they want. Allowing sudo access to Java is awfully close to giving the users full access to root if they want it.

You're probably a lot better off writing a wrapper script, limiting write access to that script to root only, making sure the environment variables are all clean, and then giving sudo access to that wrapper script instead of allowing sudo to run Java directly.
These 2 Users Gave Thanks to achenle For This Post:
Corona688 rbatte1
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

sudoers on HP 11.11

Having a "running low on coffee" moment here & need help. On HP 11.11 where is the sudoers file located; I looked every place I could think of and don't see it. Thanks in advance:confused: (2 Replies)
Discussion started by: dhlopomo
2 Replies

2. UNIX for Advanced & Expert Users

Usernames in Sudoers have #

We have users that have a # in their username. Sudo is working on some servers and not others. I have narrowed it down to the # in their username. Any suggestions or ideas why it is working on 1 server but not another. Server not working is - Solaris 10 patch level 138888-01 Server working is ... (1 Reply)
Discussion started by: Gibby13
1 Replies

3. UNIX for Dummies Questions & Answers

sudoers

i just installed/configured apache2.0 on my own aix5.3 mini server. i can start/stop apache by root, but i want to start it under my login id(admin) instead. i need to execute this command: /usr/bin/sudo /usr/IBM/HTTPServer/bin/apachectl stop/start. (5 Replies)
Discussion started by: tjmannonline
5 Replies

4. UNIX for Advanced & Expert Users

sudoers file

i have defined a rule in the sudoers file so a specific user is able to run some commands as sudo with no password. my question is: is it possible to restrict a user to run commands as sudo only in a certain directory? for example: chown only the files that are located in /var/tmp. Thank you. ... (2 Replies)
Discussion started by: noam128
2 Replies

5. Solaris

sudoers

this is for the first time i am going to use sudoers i want know how to create sudoers and giving privileges for that users thanks in advance dinu (6 Replies)
Discussion started by: dinu
6 Replies

6. Solaris

sudoers

what is the configuration file for sudo? can we edit it as like other file or will it create any adverse effect on editing that file? thanks in advance dinu (1 Reply)
Discussion started by: dinu
1 Replies

7. HP-UX

sudo/sudoers

Dear folks. Considering PCIDSS standards, i have requirment to use sudo(ers) to log everything a certain user executes with root privileges. Now, for an admin it's just a pain in the ass to prefix every command with sudo. Only way i can think of is making .aliases and with some awk magic... (6 Replies)
Discussion started by: Peasant
6 Replies

8. UNIX for Dummies Questions & Answers

Help with Sudoers file

Hi using Solaris 10. trying to update /etc/sudoers file I need to add all the fist level operation team. This is what I have but it doesn't seem to work. Please help.Error message sudo su - >>> sudoers file: parse error, line 9 <<< >>> sudoers file: parse error, line 9 <<< ... (2 Replies)
Discussion started by: samnyc
2 Replies

9. Linux

Sudoers in Centos

In our servers we don't have proper groups and No active Directory. We are adding Users locally and providing users a public key, that's the way they can connect to the servers using .ppk file. My manager ask me to prompt for a password based login when they try for Sudo. (Currently it was set... (1 Reply)
Discussion started by: shekar777
1 Replies

10. Solaris

Sudoers file

In the sudoers file in Solaris... I am trying to limit the DEVELOPER user privileges to where those users can only use the “rm” command in certain directories. This is to prevent them from deleting directories or files and destroying a server. I want them to be able to use the "rm" command but... (1 Reply)
Discussion started by: nzonefx
1 Replies

LEARN ABOUT DEBIAN

airport-linkmon

AIRPORT-LINKMON(1)					      General Commands Manual						AIRPORT-LINKMON(1)

NAME

       airport-linkmon	-  Wireless link quality monitor for the original Apple AirPort Base Station ("Graphite") and the Lucent RG-1000 base sta-
       tion

SYNOPSIS

       airport-linkmon

DESCRIPTION

       airport-linkmon allows you to measure the signal strength and noise on the wireless links between your  base  station  and  its	associated
       wireless hosts.

OPTIONS

       airport-linkmon	accepts  no  command-line  options.  airport-linkmon  is  a  wrapper script around the LinkMonitor.jar jar file located in
       /usr/share/java/airport-utils.

       You can set the JAVACMD environment variable to use a specific JVM instead of the one chosen by the wrapper script. Set the DEBUG  environ-
       ment variable to 1 to get the debug output from the wrapper script.

ENVIRONMENT VARIABLES

       DEBUG  Set this variable to 1 to get the debug output from the wrapper script.

       JAVACMD
	      The  full  path  to  the	Java  Virtual  Machine	to  use.  By  default,	the  wrapper  uses JAVACMD; if it is not set, it looks for
	      JAVA_BINDIR/java, then for JAVA_HOME/bin/java before looking for a java executable in the PATH. In the latter case, the JVM used can
	      be configured using the Debian alternatives system (see update-alternatives(8)).

       JAVA_HOME
	      The full path where your JDK/JRE is installed.

       JAVA_BINDIR
	      The full path to the directory where the java executable is located.

       JAVA_ARGS
	      Extra command-line arguments to be passed to the Java Virtual Machine.

AUTHOR

       airport-linkmon was written by Jon Sevy <jsevy@cs.drexel.edu>.

       This manual page was written by Julien BLACHE <jblache@debian.org>, for the Debian project (but may be used by others).

								   May 20, 2006 						AIRPORT-LINKMON(1)
All times are GMT -4. The time now is 05:59 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy