topic Re: Allow common user run some commands in Operating System - HP-UX

Allow common user run some commands

Gustavo Souza Lima — Mon, 19 May 2008 12:49:58 GMT

Hi,

I would like to know how to allow a common user to execute lvm commands on Unix operating system without typing the root's password.

Regards,
Gustavo

Re: Allow common user run some commands

Robert-Jan Goossens — Mon, 19 May 2008 12:55:16 GMT

Hi Gustavo,

Yes, you could setup sudo.

Sofware
http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.9p15/

Docs
http://www.aplawrence.com/Basics/sudo.html

Regards,
Robert-Jan

Re: Allow common user run some commands

James R. Ferguson — Mon, 19 May 2008 12:59:08 GMT

Hi Gustavo:

While I agree with Robert-Jan that 'sudo' is an appropriate choice if you must, I have to ask WHY?

Why would you want a non-root user to execute LVM commands? Certainly, you don't want configuration changes made! Which command(s) do the non-root users need and what is it from their output that is required?

Regards!

...JRF...

Re: Allow common user run some commands

Gustavo Souza Lima — Mon, 19 May 2008 13:12:54 GMT

Thank you for the Answers guys...

James,

I would like do this because in my company the root user will be used only in an extreme situation, such as, re-configure kernel. But to execute daily tasks, such as, create a new user or extend a filesystem, volume group or lvol, I would like to use a non-root user because I could audit what that user did.

Did you understand what I meant??

If you have another solution, please let me know...

Re: Allow common user run some commands

Sp4admin — Mon, 19 May 2008 13:25:19 GMT

Hi Gustavo,

What you have described is the daily task on system admin. As he/she would need to use the root login to achieve these task. I don't quite understand. If your worried about command being issued you can create audit logs to have monitor what going on. Anyway 'SUDO" would be your best bet to allow non root users to issue root commands.

Just my $0.02
Sp,

Re: Allow common user run some commands

Jeeshan — Mon, 19 May 2008 15:10:26 GMT

Hi

If you wanna track the user, you can go for SUDO.

If the user is trusted !!!!!, you can go for ACL.