search for: cmnd_alias

Displaying 13 results from an estimated 13 matches for "cmnd_alias".

1999 Nov 13
0
Retraction: security hole in sudo allows users full access
...liases. Again, the value of an item may be ......... Cmnd_List ::= Cmnd | Cmnd ',' Cmnd_List ....... The reserved word ALL is a a built in alias that always causes a match to succeed. It can be used wherever one might otherwise use a Cmnd_Alias, User_Alias, Runas_Alias, or Host_Alias. You should not try to define your own alias called ALL as the built in alias will be used in preference to your own. I assumed the built in alias ALL had to do with the commands defined in the sudoers file. Assuming definitely made...
2008 Jul 09
2
sudoers
Hi, I need to run /bin/mount and /sbin/mount.cifs commands as nobody user (it has (bin/bash shell). So, I've edited /etc/sudoers and added: Cmnd_Alias CMD_MOUNT = /bin/mount Cmnd_Alias CMD_CIFS ) = /sbin/mount.cifs nobody ALL = NOPASSWD: CMD_MOUNT nobody ALL = NOPASSWD: CMD_CIFS But when I run the command as nobody (in the shell), I get the error: "mount error 1 = Operation not permitted" Any ideas ? Any he...
2018 Aug 14
2
Is there a way to remove launching shell command from Asterisk CLI
Hello, Is there a way to let someone access to Asterisk CLI and type whatever command (s)he likes but the shell command (the ones started by !) ? Ideally, it could be an argument to rasterisk: rasterisk --no-shell When done, a session could be like this: > pjsip show endpoints ... > core reload ... > !rm /etc/foobar Forbidden Suggestions ? Best regards -------------- next part
2006 Sep 29
7
Facts load by puppet -factsync question
fact loads: I use facter to search the rsync path and then i write this sudoers line: Cmnd_Alias BACKUPCOMMANDS = /usr/bin/rsync I call puppet like this: puppetd --factsync --server=xxx.yyy.61.131 --waitforcert 60 --test the recipe is: sudoensure_line { sudobackupcommands: ligne => "Cmnd_Alias BACKUPCOMMANDS = $rsyncpath",...
2008 Sep 18
1
using NOPASSWD in sudoers
...s, but not the NOPASSWD line. I have tried changing the order of these lines with no change in behavior. After each change to the sudoers file, I am logging out of the machine and logging back in to make sure that it is properly reading the changes. I have also replaced the list of commands with a Cmnd_Alias, with no change in behavior. Any thoughts or suggestions about what I am missing. -- Doug Registered Linux User #285548 (http://counter.li.org) ---------------------------------------- Never trust a computer you can't throw out a window. -- Steve Wozniak
2006 Apr 28
2
Running mount in a script.
I am running CentOS 4 and have the need to run "mount -t cifs ..." from within a perl or bash script as part of an application. The application does not run as root. I have been trying to do a chmod +s on a root owned script but that doesn't seem to work. I still get permission errors. I also took a look at sudo but that appears to require a user to periodically enter a password.
2008 Jan 19
1
mixing templates and other methods for a file''s content
...} } and sudoers.erb: <% musers = "" susers = "" IO.foreach("/etc/puppet/bootstrap/hosts.dat") do |l| a = l.split if a[1] == hostname musers = a[5] if a.length >= 8 susers = a[7] end break end end %> Cmnd_Alias INST = /usr/sbin/synaptic, /usr/bin/cpan, /usr/bin/apt- get root ALL=(ALL) ALL %adm ALL=(ALL) ALL #### These users can install and deinstall stuff <% if musers.length > 0 -%> User_Alias MAINUSERS = <%= musers %> MAINUSERS ALL = (ALL) PASSWD: INST <% end -%> ### These u...
2002 Jul 31
0
RE: Solaris/Winbind Problems
...onf /etc/nsswitch.conf.nowinbind sudo mv /etc/nsswitch.conf.winbind /etc/nsswitch.conf trap 2 3 I created in /etc/: nsswitch.conf.winbind (has the winbind options) nsswitch.conf.nowinbind (does not have the winbind options) I installed sudo, and added the following in its configuration file: Cmnd_Alias SAMBAPASSWD = /usr/bin/mv /etc/nsswitch.conf /etc/nsswitch.conf.winbind, \ /usr/bin/mv /etc/nsswitch.conf.nowinbind /etc/nsswitch.conf, \ /usr/bin/mv /etc/nsswitch.conf /etc/nsswitch.conf.nowinbind, \ /usr/bin/mv /etc/nsswit...
2002 Aug 01
0
RE: Solaris/Winbind Problems
...onf.winbind /etc/nsswitch.conf > trap 2 3 > > I created in /etc/: > > nsswitch.conf.winbind (has the winbind options) > nsswitch.conf.nowinbind (does not have the > winbind options) > > I installed sudo, and added the following in its configuration file: > > Cmnd_Alias SAMBAPASSWD = /usr/bin/mv /etc/nsswitch.conf > /etc/nsswitch.conf.winbind, \ > /usr/bin/mv /etc/nsswitch.conf.nowinbind > /etc/nsswitch.conf, \ > /usr/bin/mv /etc/nsswitch.conf > /etc/nsswitch.conf.nowinbind, \ >...
2002 Aug 01
0
RE: Solaris/Winbind Problems
...onf.winbind /etc/nsswitch.conf > trap 2 3 > > I created in /etc/: > > nsswitch.conf.winbind (has the winbind options) > nsswitch.conf.nowinbind (does not have the > winbind options) > > I installed sudo, and added the following in its configuration file: > > Cmnd_Alias SAMBAPASSWD = /usr/bin/mv /etc/nsswitch.conf > /etc/nsswitch.conf.winbind, \ > /usr/bin/mv /etc/nsswitch.conf.nowinbind > /etc/nsswitch.conf, \ > /usr/bin/mv /etc/nsswitch.conf > /etc/nsswitch.conf.nowinbind, \ >...
2012 Jan 25
3
Having problems with sudoers
I've got a Cento 6.2 server I'm putting together that will become a mailserver. It will have on it MailScanner and MailWatch for MailScanner. I'm using the latest stuff available and have run into a problem with changes I need to make in the /etc/sudoers file. It doesn't seem to take affect after I make the changes, so either the syntax within the file has changed or the way
2012 Apr 28
5
Restricting users from certain privileges
Hi: I could not figure out how to restrict users or other users from certain privileges to execute certain commands in FreeBSD/NanoBSD? What I meant is I want to create a NanoBSD image in which there will be an additional user, say 'admin'. I need to give this new user (admin) some privileges to run some root-can-only-execute commands, but not all (ACL similar to the firmwares in adsl
2010 May 20
10
Question about templates from variables
I''m running into an issue trying to do something like the following: class test { file {"test": content => template(''mytemplate1'',''mytemplate2''), } } class test::test2 inherits test { File["test"] { content +> template(''mytemplate3''), } } So, basically I want the inherited class to tack on another