Sponsored Content
Operating Systems Solaris Sudo access of rm to non-root user Post 303002438 by apmcd47 on Thursday 24th of August 2017 06:48:16 AM
Old 08-24-2017
Quote:
Originally Posted by solaris_1977
Hello,
It is Solaris-10. There is a file as /opt/vpp/dom1.2/pdd/today_23. It is always generated by root, so owned by root only.
This file has to be deleted as part of application restart always and that is done by app_user and SA is always involved to do rm on that file.
Is it possible to give rm access to app_user, only to that file, via sudoers ? So that, he can delete only that file, not any other path or file or folder.

Regards
I'm willing to bet that when you come back with why the file is written by root it is because the directory /opt/vpp/dom1.2/pdd is owned by root.

Consider this:
Code:
dewi(6)$ file xyzzy
xyzzy: cannot open `xyzzy' (No such file or directory)
dewi(7)$ sudo touch xyzzy
[sudo] password for apm: 
dewi(8)$ ls -l xyzzy
-rw-r--r-- 1 root root 0 24 Aug 11:29 xyzzy
dewi(9)$ rm xyzzy
rm: remove write-protected regular empty file 'xyzzy'? y
dewi(10)$ ls -l xyzzy
ls: cannot access 'xyzzy': No such file or directory
dewi(11)$ sudo mkdir XYZZY
dewi(12)$ ls -ld XYZZY/                                                        
drwxr-xr-x 2 root root 4096 24 Aug 11:31 XYZZY/
dewi(13)$ cd XYZZY/                                                            
dewi(14)$ sudo touch xyzzy
dewi(15)$ ls -la
total 8
drwxr-xr-x  2 root root 4096 24 Aug 11:32 .
drwxr-xr-x 19 apm  sog  4096 24 Aug 11:31 ..
-rw-r--r--  1 root root    0 24 Aug 11:32 xyzzy
dewi(16)$ rm -f xyzzy 
rm: cannot remove 'xyzzy': Permission denied
dewi(17)$

So because I own the parent directory I was able to deleted the first xyzzy file, but because root owned the directory XYZZY I was unable to delete the second xyzzy file.

So why does the file today_23 need to be created in the directory /opt/vpp/dom1.2/pdd? Can it be created elsewhere? Failing that, could the directory pdd be modified to give the user the required write permission to create and delete the file without root access?

Andrew
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

How to allow access to some commands having root privleges to be run bu non root user

hi i am new to unix and i have abig task. i have to \run particular commands having root privileges from a non root user. i know sudo is one of the way but i need sum other approach kindly help Thanks (5 Replies)
Discussion started by: suryashikha
5 Replies

2. AIX

sudo user access

I have installed sudo on AIX 6100-04 and want to know how do I set it up for a user to be able to run only some commands? I want to give the user the rights to only cd to certain directories and run the ls command to name a few? Are there any issues with running sudo when the user is forced to... (2 Replies)
Discussion started by: daveisme
2 Replies

3. Shell Programming and Scripting

Cron job initiating ssh AND sudo (from user, not root)

I've been bashing my head on the desk for 2 days trying to get this to work, but I've had no luck. I'll try to be as clear as possible in my explanation without dragging out the details. I'm trying to set up a cron job for user "john" which runs a script. This script initiates an ssh connection to... (5 Replies)
Discussion started by: eh3civic
5 Replies

4. UNIX for Dummies Questions & Answers

sudo/root access

I'm actually working with a Ubuntu-System here and have a question about executing a command with 'sudo'. I tried and got a error message like "not allowed". After this I logged in with 'sudo -s' and typed the command without 'sudo'. This worked well. Can please somebody explain me this... (0 Replies)
Discussion started by: daWonderer
0 Replies

5. UNIX for Dummies Questions & Answers

Sudo to delegate permission from non-root user to another non-root user

I've been through many threads before i decide to create a separate thread. I can't really find the solution to my (simple) problem. Here's what I'm trying to achieve: As "canar" user I want to run a command, let's say "/opt/ocaml/bin/ocaml" as "duck" user. The only to achieve this is to... (1 Reply)
Discussion started by: canar
1 Replies

6. AIX

how to remove sudo access from a user ?

Hello Folks, I need help on removing sudo access on one id but first of all, can i confirm that the user below is having sudo access ? if he did have sudo access, how to remove ? thanks alrsprd3:root-/etc> more sudoers | grep fzcx0l fzcx0l ALL=(ALL) ALL alrsprd3:root-/etc> (2 Replies)
Discussion started by: wingcross
2 Replies

7. Shell Programming and Scripting

How to give root access to non root user?

Currently in my system Red Hat is installed. And Many user connect to my machine via SSH Techia Terminal. I want to give some users a root level access. Can anyone please help me how to make it possible. I too searched on the Google but didn't find the correct way Regards ADI (4 Replies)
Discussion started by: adisky123
4 Replies

8. UNIX for Dummies Questions & Answers

Create user with sudo ability to root.

Hi All, I need to give an user sudo ability to root. We have also generated RSA key but unable to proceed further. For example after a user logs into the server normally and when he executes below command $ssh root@server_name This should take you to root prompt # Please help me.... (3 Replies)
Discussion started by: Rockyc3400
3 Replies

9. Red Hat

Sudo to user other than root but do not allow sudo to root

I have a set of RHEL 5 boxes running our ERP software on Oracle databases. I need to allow my DBA's to su to oracle and one other account (banner) without knowing the oracle or banner password. But I need to prevent them from su'ing to any other user especially root. I only want them to be able to... (1 Reply)
Discussion started by: westmoreland
1 Replies

10. UNIX for Advanced & Expert Users

How to provide root access via sudo with restrictions?

Hi, I have a requirement to provide root access but user should not run some specific commands, How it is possible. following is my configuration at sudoers file, Cmnd_Alias MYLIMIT = /usr/bin/passwd /sbin/shutdown /usr/bin/reboot /usr/sbin/visudo /bin/vi /usr/bin/vim test2... (5 Replies)
Discussion started by: anuragr
5 Replies
Catalyst::Plugin::ConfigLoader::Manual(3pm)		User Contributed Perl Documentation	       Catalyst::Plugin::ConfigLoader::Manual(3pm)

NAME
Catalyst::Plugin::ConfigLoader::Manual - Guide to using the ConfigLoader plugin BASIC USAGE
package MyApp; use Catalyst qw( ConfigLoader ... ); ENVIRONMENT VARIABLES
o "MYAPP_CONFIG" - specific config file to load for "MyApp" o "CATALYST_CONFIG_LOCAL_SUFFIX" - global suffix for extra config files o "MYAPP_CONFIG_LOCAL_SUFFIX" - suffix specifically for "MyApp" CONFIG FORMATS
Config::General Extensions o cnf o conf Example Config name = TestApp <Component Controller::Foo> foo bar </Component> <Model Baz> qux xyzzy </Model> INI Extensions o ini Example Config name=TestApp [Controller::Foo] foo=bar [Model::Baz] qux=xyzzy JSON Extensions o jsn o json Example Config { "name": "TestApp", "Controller::Foo": { "foo": "bar" }, "Model::Baz": { "qux": "xyzzy" } } Perl Extensions o pl o perl Example Config { name => 'TestApp', 'Controller::Foo' => { foo => 'bar' }, 'Model::Baz' => { qux => 'xyzzy' } } XML Extensions o xml Example Config <config> <name>MyApp::CMS</name> <paths> <upload_dir>/var/www/docs/myapp-cms/uploads</upload_dir> </paths> <model name="DB"> <connect_info>dbi:mysql:cmsdb</connect_info> <connect_info>user</connect_info> <connect_info>password</connect_info> </model> <component name="View::TT"> <INCLUDE_PATH>__path_to(root,templates)__</INCLUDE_PATH> <ENCODING>UTF-8</ENCODING> <TRIM>1</TRIM> <PRE_CHOMP>2</PRE_CHOMP> <POST_CHOMP>2</POST_CHOMP> </component> </config> Note that the name attribute for the "model" tag should be the relative namespace of the Catalyst model, not the absolute one. That is for "MyApp::Model::Something" the "name" attribute should be "Something". YAML Extensions o yml o yaml Example Config --- name: TestApp Controller::Foo: foo: bar Model::Baz: qux: xyzzy COOKBOOK
Configuring a Catalyst::Model::DBIC::Schema model from a YAML config Model::MyModel: schema_class: MyApp::MySchema connect_info: - dbi:SQLite:myapp.db - '' - '' - AutoCommit: 1 Converting your existing config to Config::General format As of Catalyst::Devel 1.07, a newly created application will use Config::General for configuration. If you wish to convert your existing config, run the following one-liner (replacing MyApp with your app's name): perl -Ilib -MMyApp -MConfig::General -e 'Config::General->new->save_file("myapp.conf", MyApp->config);' Using UTF-8 strings in a Config::General file If you have UTF-8 strings in your Config::General-based config file, you should add the following config information to MyApp.pm: __PACKAGE__->config( 'Plugin::ConfigLoader' => { driver => { 'General' => { -UTF8 => 1 }, } } ); Using a local configuration file When ConfigLoader reads configurations, it starts by reading the configuration file for "myapp" with one of the supported extensions as listed above. For example, A Config::General config file is "myapp.conf". If a configuration file called "myapp_local" exists with one of the supported file extensions, it will also be read, and values from that file will override values from the main config file. A Config::General local configuration file would be called "myapp_local.conf". The "local" suffix can be changed. See "get_config_local_suffix" in Catalyst::Plugin::ConfigLoader for the details of how. This is useful because it allows different people or environments to have different configuration files. A project with three developers, Tom, Dick, and Harry as well as a production environment can have a "myapp_tom.conf", a "myapp_dick.conf", a "myapp_harry.conf", and a "myapp_production.conf". Each developer, and the web server, would set the environment variable to load their proper configuration file. All of the configurations can be stored properly in source control. If there is no "myapp_local.ext" (where .ext is a supported extension), and the individual configuration files contain something required to start the application, such as the Model's data source definition, the applicaton won't start unless the environment variable is set properly. perl v5.14.2 2010-03-23 Catalyst::Plugin::ConfigLoader::Manual(3pm)
All times are GMT -4. The time now is 08:25 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy