similar to: Retraction: security hole in sudo allows users full access

Hello Everyone, I am trying to change our /etc/sudoers (using visudo) to allow 2 commands to be run as root without a password, but it isn't working. Here is the part of the sudoers file that is in question. # User alias specification User_Alias FULLACCESS = doug, scott # members of the FULLACCESS User_Alias may run chown and chmod without a password FULLACCESS ALL = (root) NOPASSWD:

Hello there, I have come to a situation where I would like to mix 2 approaches to create the contents of a file. Here is what I have: a module ''sudo'' which manages a hosts /etc/sudoers file: init.pp: class sudo { case $operatingsystem { Debian: { package { "sudo": } } } file { "/etc/sudoers": mode => 440, content =>

I'm trying to get dynamic tagging (user+sometag at example.com) to work on a mail server I'm setting up, however it only works as long as it's sent to the main user and not to aliases. virtual-alias-maps query: SELECT get_email_alias_dyn('%s') virtual-mailbox-domains query: SELECT 1 FROM domain WHERE name='%s' virtual-mailbox-maps query: SELECT 1 FROM user_alias

Hello. I recently upgraded to 9.1-RC3, everything went fine, however the / partition its about to get full. Im really new to FreeBSD so I don?t know what files can be deleted safely. # find -x / -size +10000 -exec du -h {} \; 16M /boot/kernel/kernel 60M /boot/kernel/kernel.symbols 6.7M /boot/kernel/if_ath.ko.symbols 6.4M /boot/kernel/vxge.ko.symbols 9.4M

Hi, I need to run /bin/mount and /sbin/mount.cifs commands as nobody user (it has (bin/bash shell). So, I've edited /etc/sudoers and added: Cmnd_Alias CMD_MOUNT = /bin/mount Cmnd_Alias CMD_CIFS ) = /sbin/mount.cifs nobody ALL = NOPASSWD: CMD_MOUNT nobody ALL = NOPASSWD: CMD_CIFS But when I run the command as nobody (in the shell), I get the error: "mount

fact loads: I use facter to search the rsync path and then i write this sudoers line: Cmnd_Alias BACKUPCOMMANDS = /usr/bin/rsync I call puppet like this: puppetd --factsync --server=xxx.yyy.61.131 --waitforcert 60 --test the recipe is: sudoensure_line { sudobackupcommands: ligne => "Cmnd_Alias BACKUPCOMMANDS = $rsyncpath",

Hello, I''m having trouble with after_validation_on_create causing my validations to fail silently. I''ve got a restful_authentication based user model that requires a number of things from the user: email, dob, gender, etc. When a user is created, all of these are validated in various ways (presence, inclusion_of, etc.). Afterwards, I call three protected methods using

Hi All, Well, it <http://goo.gl/hzxyw> was too good to be true. Under extreme, extended IO on a 48core node, some part of the the NFS stack collapses and leads to an IO lockup thru NFS. We've replicated it on 48core and 64 core nodes, but don't know yet whether it acts similarly on lower-core-count nodes. Tho I haven't had time to figure out exactly /how/ it collapses, I

Yes, it kind of sucks that it does not work correctly. I did the following kluge for now: I did the following: In /usr/sbin, I created a script called passwd: #!/bin/ksh trap "" 2 3 sudo mv /etc/nsswitch.conf /etc/nsswitch.conf.winbind sudo mv /etc/nsswitch.conf.nowinbind /etc/nsswitch.conf /usr/bin/passwd $1 sudo mv /etc/nsswitch.conf /etc/nsswitch.conf.nowinbind sudo mv

Hi, if winbind or/and NIS is/are running and you want to change the password of the local account, you can do this with: /usr/bin/passwd -r files <Username> So you don?t have to move the configuration files. Have you tried this? Bernd Schmeling > -----Original Message----- > From: David Shapiro [mailto:david.shapiro@btitele.com] > Sent: Wednesday, July 31, 2002 7:53 PM >

I am running CentOS 4 and have the need to run "mount -t cifs ..." from within a perl or bash script as part of an application. The application does not run as root. I have been trying to do a chmod +s on a root owned script but that doesn't seem to work. I still get permission errors. I also took a look at sudo but that appears to require a user to periodically enter a password.

Hello everybody! How can i create with puppet following sudoers file: User_Alias CENTREON=apache,nagios CENTREON ALL = NOPASSWD: /etc/init.d/nagios* restart CENTREON ALL = NOPASSWD: /etc/init.d/nagios* reload CENTREON ALL = NOPASSWD: /usr/bin/nagios* -v * The problem that augeas create only last line, replacing previous one. -- You received this message because you are subscribed to

I''m running into an issue trying to do something like the following: class test { file {"test": content => template(''mytemplate1'',''mytemplate2''), } } class test::test2 inherits test { File["test"] { content +> template(''mytemplate3''), } } So, basically I want the inherited class to tack on another

No, I have not tried that. The problem is teaching all the users this. I suppose the script I sent you for /usr/sbin/passwd could do this for them instead of the moving stuff. It would make it safer--in that, it would help avoid the problem where if a user cancels in mid-passwd-change the correct file may not be put back in place (there are ways around this too, of course). Thanks for the

I've got a Cento 6.2 server I'm putting together that will become a mailserver. It will have on it MailScanner and MailWatch for MailScanner. I'm using the latest stuff available and have run into a problem with changes I need to make in the /etc/sudoers file. It doesn't seem to take affect after I make the changes, so either the syntax within the file has changed or the way

Hello, Is there a way to let someone access to Asterisk CLI and type whatever command (s)he likes but the shell command (the ones started by !) ? Ideally, it could be an argument to rasterisk: rasterisk --no-shell When done, a session could be like this: > pjsip show endpoints ... > core reload ... > !rm /etc/foobar Forbidden Suggestions ? Best regards -------------- next part

Este no es el correo de Yanier ----- Original Message ----- From: <samba-request@lists.samba.org> To: <samba@lists.samba.org> Sent: Tuesday, May 10, 2005 2:02 PM Subject: samba Digest, Vol 29, Issue 13 > Send samba mailing list submissions to > samba@lists.samba.org > > To subscribe or unsubscribe via the World Wide Web, visit >

Dear All, I am new to ordinal logistic regression. Using ordinal regression within the R Commander GUI, I have generated an independent variable that is significant, but whose 95% confidence intervals slightly crosses "1". Is this possible? Here is the syntax and output: polr(formula = CDIcat ~ Employment, data = CDIallvariables, Hess = TRUE, method = "logistic")

Dear Moderator, Please post the following on your job board. Thanks!! *************************************************************************************************************** My client in Bay Area, CA is looking for 5 FreeBSD kernel developers for contract only/ contract to Hire / Fulltime positions. Here are the details: Title: SOFTWARE ENGINEER (FREE BSD KERNEL) - 5 positions Job

Hi All, Am looking for Ruby on Rails Developers and Testers for Full time Job Opportunities. Below are the available job opportunities:- 1. Position: Lead/Senior Application Engineer Location: San Mateo, CA Duration: Fulltime/ Contract to Hire Requirements: Developed usable, responsive applications in Ruby on Rails or Java / Spring / Hibernate Experience with UI frameworks (such as RoR and a