Command disabling sudo access Post: 303040498

10 More Discussions You Might Find Interesting

1. Solaris

secure access using sudo

I just need to know what should be done on a login user so that no one can access it except through sudo i.e. telnet server login: user NO ACCESS telnet server login: mylogin sudo - user <any command> ACCESS GRANTED thanks

2. AIX

sudo user access

I have installed sudo on AIX 6100-04 and want to know how do I set it up for a user to be able to run only some commands? I want to give the user the rights to only cd to certain directories and run the ls command to name a few? Are there any issues with running sudo when the user is forced to...

3. UNIX for Dummies Questions & Answers

does disabling requiretty in sudo have security implications with SSH?

I've run into an issue running rsync remotely via SSH/sudo ... I get the error sudo: sorry, you must have a tty to run sudo I know that I can disable the tty in sudoers file ( !requiretty), but my question is: is there a security risk by disabling requiretty with SSH/rsync/sudo? Is...

4. Shell Programming and Scripting

ONLY SU Sudo access

Hello All, I want to create a script that will do ONLY su to any user on the server with hpadmin login using sudo. Can anyone let me know how can it do it. Regards Ankit

5. Shell Programming and Scripting

ssh foo.com sudo command - Prompts for sudo password as visible text. Help?

I am writing a BASH script to update a webserver and then restart Apache. It looks basically like this: #!/bin/bash rsync /path/on/local/machine/ foo.com:path/on/remote/machine/ ssh foo.com sudo /etc/init.d/apache2 reloadrsync and ssh don't prompt for a password, because I have DSA encryption...

6. UNIX for Dummies Questions & Answers

sudo/root access

I'm actually working with a Ubuntu-System here and have a question about executing a command with 'sudo'. I tried and got a error message like "not allowed". After this I logged in with 'sudo -s' and typed the command without 'sudo'. This worked well. Can please somebody explain me this...

7. UNIX for Advanced & Expert Users

Help needed in sudo access

I want to give root access to a user called denielr on server - tsprd01, but do not want to share root password. I have sudoers configured already. He should have all access equal to root. I made this entry in /etc/sudoers, but it is not working denielr tsprd01 =(root) NOPASSWD: ALL I tried to...

8. AIX

Disabling SSH direct access for an AIX user

Hello everyone, Can anyone help me please. I want to disable SSH direct access for an AIX user. For example, if I have USER1 and USER2. I want to disactivate direct access for USER2. The user must enter his login (USER1) and his password and then he can do su - USER2 . Thanks,

9. Red Hat

Sudo access issue

Hi, I have given access to user mwadmin in shudders file as : mwadmin ALL:NOPASSWD:/www/* /usr/* /opt/* However, not able to execute below command: sudo mkdir -p /usr/test password for mwadmin: Sorry, user mwadmin is not allowed to execute '/bin/mkdir -p /usr/test' as root. ...

10. UNIX for Dummies Questions & Answers

Inheriting SUDO access?

I had a question on users inheriting SUDO capabilities of another account. Let's say that there are three users A, B, and C. A has access to Sudo into B. B has access to Sudo into C. Does this give A access to sudo into B and then sudo into C. A -> B B -> C A -> B -> C ? Another example. My...

LEARN ABOUT OPENSOLARIS

lx

lx(5)							Standards, Environments, and Macros						     lx(5)

NAME

       lx - Linux branded zone

DESCRIPTION

       The  lx	brand  uses  the branded zones framework described in brands(5) to enable Linux binary applications to run unmodified on a machine
       with a Solaris Operating System kernel.

       The lx brand includes the tools necessary to install a CentOS 3.x or Red Hat Enterprise Linux 3.x distribution inside  a  non-global  zone.
       The  brand  supports  the  execution of 32-bit Linux applications on x86/x64 machines running the Solaris system in either 32-bit or 64-bit
       mode.

   Supported Linux Distributions
       The lx brand emulates the system call interfaces provided by the Linux 2.4.21 kernel, as modified by Red Hat in the RHEL 3.x distributions.
       This kernel provides the system call interfaces consumed by the glibc version 2.3.2 released by Red Hat.

       In addition, the lx brand partially emulates the Linux /dev and /proc interfaces.

   Configuration and Administration
       The  lx brand supports the whole root non-global zone model. All of the required linux packages are installed into the private file systems
       of the zone.

       The zonecfg(1M) utility is used to configure an lx branded zone. Once a branded zone has  been  installed,  that  zone's  brand	cannot	be
       changed	or removed. The zoneadm(1M) utility is used to report the zone's brand type and administer the zone. The zlogin(1) utility is used
       to log in to the zone.

   Application Support
       The lx zone only supports user-level Linux applications. You cannot use Linux device drivers, Linux kernel modules, or Linux  file  systems
       from inside an lx zone.

       You cannot add any non-standard Solaris devices to a Linux zone. Any attempt to do so will result in a zone that zonecfg(1M) will refuse to
       verify.

       You cannot run Solaris applications inside an lx zone. Solaris debugging tools such as DTrace (see dtrace(1M)) and mdb (see mdb(1)) can	be
       applied to Linux processes executing inside the zone, but the tools themselves must be running in the global zone. Any core files generated
       are produced in the Solaris format, and such files can only be debugged with Solaris tools.

ATTRIBUTES

       See attributes(5) for a description of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWlxr, SUNWlxu		   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Evolving			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       mdb(1), zlogin(1), zonename(1), dtrace(1M), zoneadm(1M), zonecfg(1M), brands(5), zones(5), lx_systrace(7D)

SunOS 5.11							    19 Sep 2006 							     lx(5)

10 More Discussions You Might Find Interesting

1. Solaris

secure access using sudo

Discussion started by: melanie_pfefer

2. AIX

sudo user access

Discussion started by: daveisme

3. UNIX for Dummies Questions & Answers

does disabling requiretty in sudo have security implications with SSH?

Discussion started by: kettlewell

4. Shell Programming and Scripting

ONLY SU Sudo access

Discussion started by: ajaincv

5. Shell Programming and Scripting

ssh foo.com sudo command - Prompts for sudo password as visible text. Help?

Discussion started by: fluoborate

6. UNIX for Dummies Questions & Answers

sudo/root access

Discussion started by: daWonderer

7. UNIX for Advanced & Expert Users

Help needed in sudo access

Discussion started by: solaris_1977