Red Hat

i need to set up a user to execute a restricted command as another user and to be able to do so without entering a password. I understand the security concerns but let's not go there, unless you are really compelled to do so... The directive to permit is that I believe should work and did add to the end of the /etc/sudoers file is:

Code:

user1        ALL=(user2)  NOPASSWD: /bin/kill

but it appears not to work as after entering

Code:

sudo -u user2 -i /bin/kill -15 1234

I get prompted for user1's password.

Any suggestions appreciated, including why the above does not work.

Thanks...

twk,

are u sure the proccess (1234) is running as user2. can u list out the sudo -l output from user1

You shouldn't use "-i" as parameter to sudo, because this flag instructs sudo to run the command as a login shell like this:

Code:

/bin/bash -c /bin/kill 1234

instead of

Code:

/bin/kill 1234

and you only gave sudo permissions to /bin/kill, not to /bin/bash.

So you should run your sudo command as follows, without the "-i":

Code:

sudo -u user2 /bin/kill -15 1234

Let us know how it works for you.