Visit The New, Modern Unix Linux Community


Set sudo access to expire on given day\date?


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Set sudo access to expire on given day\date?
# 1  
RedHat Set sudo access to expire on given day\date?

Scenario: Admin wants to grant user temporary access to sudo that will expire on an arbitrary date\day. Say, after 10 days, sudo rights disappear automatically.

I'm sure there's a way to hack something together with a script or cron job, but I was wondering if anyone has a package \ tool \ other that automates and makes this easy? If not, how do you recommend implementing it with cron \ script?

OS is Red Hat 6.x.

Thanks!
# 2  
I don't know any tools and don't have RHEL6 right now, but if your sudo is compiled with --with-env-editor, you can use any editor with visudo command to change /etc/sudoers. Then the "tool" could be something like this:

Code:
# echo -n "/username/\nd\nw\nq\n" | EDITOR=/bin/ed visudo

and all you need is to run it with at now + 10 days.
You can check, if your sudo compiled with --with-env-editor using the -V switch as root:
Code:
sudo -V

N.B. I didn't test it.
# 3  
random quick idea. make the sudo rule group based and setup the job to remove the user from that group on the day the access should be revoked.
# 4  
Somewhat flawed, but we use "at" and "usermod -G group-name user-name" to add a user to a group and "gpasswd -d user-name group-name" to remove. Two jobs, one to initiate, and one to end access and then as @frank_rizzo pointed out, we use a rule in sudo to allow access for that group-name.
 

Previous Thread | Next Thread
Thread Tools Search this Thread
Search this Thread:
Advanced Search

Test Your Knowledge in Computers #713
Difficulty: Medium
The shared bus between the program memory and data memory leads to the von Neumann bottleneck, the limited throughput (data transfer rate) between the CPU and memory compared to the amount of memory.
True or False?

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Replace date in file every day with current date

I Have text like XXX_20190908.csv.gz need to replace Only date in this format with current date every day Thanks! (1 Reply)
Discussion started by: yamasani1991
1 Replies

2. Shell Programming and Scripting

Date: invalid date trying to set Linux date in specific format

i try to set linux date & time in specific format but it keep giving me error Example : date "+%d-%m-%C%y %H:%M:%S" -d "19-01-2017 00:05:01" or date +"%d-%m-%C%y %H:%M:%S" -d "19-01-2017 00:05:01" keep giving me this error : date: invalid date ‘19-01-2017 00:05:01' Please use CODE tags... (7 Replies)
Discussion started by: umen
7 Replies

3. Shell Programming and Scripting

Shell script to set user password to never expire in UNIX servers

Hi, I have a requirement where in i need to write a shell script to set users password to never expire. I know the command which is used to perform the same .. which is chage command. But, could not figure out how to do the same in shell script. Could you please help me with the shell... (3 Replies)
Discussion started by: suren424
3 Replies

4. Shell Programming and Scripting

Set expire date for users

hello chage command is a useful command for set expire date (suspend user) : -E switch will update the “Account expires” value as shown below: chage -E "2009-05-31" username how can i write this shell script which can find present date and plus it with the value that user set, like today... (7 Replies)
Discussion started by: nimafire
7 Replies

5. Shell Programming and Scripting

ONLY SU Sudo access

Hello All, I want to create a script that will do ONLY su to any user on the server with hpadmin login using sudo. Can anyone let me know how can it do it. Regards Ankit (1 Reply)
Discussion started by: ajaincv
1 Replies

6. Shell Programming and Scripting

finding the previous day date and creating a file with date

Hi guys, I had a scenario... 1. I had to get the previous days date in yyyymmdd format 2. i had to create a file with Date inthe format yyyymmdd.txt format both are different thanks guys in advance.. (4 Replies)
Discussion started by: apple2685
4 Replies

7. Shell Programming and Scripting

how to obtain date and day of the week from `date` command

Hi, does anybody know how to format `date` command correctly to return the day of the week? Thanks -A I work in ksh.... (1 Reply)
Discussion started by: aoussenko
1 Replies

8. Solaris

Problem with password expire and sudo.

Hi, I have a small problem that I need to address regarding the password expiration for a number of different oracle accounts. Currently I have the MAXWEEKS set to 12 in the /etc/default/passwd file for all accounts. I also have sudo installed on the server and users access the oracle accounts... (2 Replies)
Discussion started by: sparcman
2 Replies

9. Red Hat

set password not to expire

Hi All, Is this true on chage command? -M, MAX_DAYS Passing the number -1 as MAX_DAYS will remove checking a password's validity. Does this means password will not expire anymore? Thanks for any comment you may add. (0 Replies)
Discussion started by: itik
0 Replies

10. Solaris

Set Password Never Expire

Hello I want to set the password for user never expire through the command line. For your information the box is running under Solaris 8 platform. (2 Replies)
Discussion started by: shamsul
2 Replies

Featured Tech Videos