[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] sudo frustrations, help please
- Subject: [ale] sudo frustrations, help please
- From: savithari at gmail.com (Narahari 'n' Savitha)
- Date: Tue, 25 Aug 2015 11:18:28 -0400
Here is the scenario I am trying to solve.
teamsysuer => system account without a shell but has the following entry
in sudoers file
teamssysuser ALL(ALL) NOPASSWD:ALL
========================
narahari => regular user
robert => regular user
========================
We want to be able to allow
narahari and robert run commands as themselves and teamsysuser only.
I have done some playing around sudoers file
User_Alias ALL_MY_USERS = narahari robert
Runas_Alias TEAM_SYS_USER = teamssysuser
......
.......
....
......
......
teamssysuser ALL=(ALL) NOPASSWD: ALL
ALL_MY_USERS ALL = (TEAM_SYS_USER) NOPASSWD:ALL
=================================
I am not sure if this is the right approach or conceptually am I wrong ?
-N
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20150825/e2cb6c62/attachment.html>