topic Re: Adding a line to Sudo in Operating System - HP-UX

Adding a line to Sudo

Nancy_32 — Tue, 27 Jul 2004 13:39:20 GMT

I created the users accounts. Now I need to let them mount and umount cdrom with sudo. What sould be the line to be use in this case. My device path is /dev/dsk/c1t2t0. Directory to mount it should be /SD_CDROM.

Thank you.
Nancy L.

Re: Adding a line to Sudo

Sundar_7 — Tue, 27 Jul 2004 13:45:45 GMT

# vi /etc/sudoers
Cmnd_Alias MOUNT_UNMOUNT=/usr/sbin/mount,/usr/sbin/umount

user1 ALL=MOUNT_UNMOUNT
user2 ALL=MOUNT_UNMOUNT
#

Re: Adding a line to Sudo

Jeff_Traigle — Tue, 27 Jul 2004 14:17:04 GMT

I would do it more like this. I don't think you really want users being able to mount and unmount anything they want to try. :) And having the User_Alias makes administering the sudoers file a little tidier.

User_Alias MOUNT_USERS=user1,user2

Cmnd_Alias MOUNT_CMNDS=/usr/sbin/mount /dev/dsk/c1t2t0 /SD_CDROM,/usr/sbin/umount /SD_CDROM

MOUNT_USERS ALL=MOUNT_CMNDS

Re: Adding a line to Sudo

Michael Tully — Tue, 27 Jul 2004 17:09:19 GMT

Depending on your version of sudo, as to where the file is and the right tool to edit 'sudoders'
Try:

# /opt/sudo/sbin/visudo

# /usr/local/sbin/visudo

Don't edit the file directly. Jeff's options are a very good guide.

Re: Adding a line to Sudo

Nancy_32 — Wed, 28 Jul 2004 08:11:26 GMT

Now, that I have added the suggested lines, the error is:

user: error in /etc/sudoers, line 18; TTY=pts/1 ; PWD= /home/user; USER=root

I am login as the user and the path I enter is: sudo /dev/dsk/c1t2d0 /home/user/SD_CDROM

The account was done with "users" as the primary group and the group account has the root permissions same as the lp, shutdown, etc......

See if you give me any suggestions.....

Re: Adding a line to Sudo

Jeff Schussele — Wed, 28 Jul 2004 08:19:30 GMT

Hi Nancy,

You must enter the command exactly as it is in the sudoers file. If there are multiple entries the command must match one of them.

EX:

sudo /usr/sbin/mount /dev/dsk/c1t2t0 /SD_CDROM

HTH,
Jeff

Re: Adding a line to Sudo

Nancy_32 — Wed, 28 Jul 2004 10:25:14 GMT

Guys,

I thank you for your help. I was totally sucessful with all your help. Also, another option I added to the user was the following:

Script file called - /etc/mountcd
#!/bin/sh
sudo /usr/sbin/mount /dev/dsk/c1t2d0 /CDROM

and
file - /etc/umountcd

#!/bin/sh
sudo /usr/sbin/umount /CDROM

Changed permissions to /etc/mountcd and /etc/umountcd
chmod +X /etc/mountcd
chmod +X /etc/umountcd

It worked fine both ways.

Thanks,
Nancy L.