topic sudo - configuring the sudoers file in Operating System - HP-UX

sudo - configuring the sudoers file

Jim Wolff — Thu, 20 Jul 2000 10:28:26 GMT

Can someone please help me.
I have read the man pages on sudo, sudoers, and visudo and can still not determine the proper syntax for adding a user the capability to execute certain commands (as root user using the sudo command).

I simply want to grant my DBA the ability to execute pfs_mount, root.sh (owner by Oracle but must be run by root), mkdir, and a couple of other commands.

I have even gone to the SUDO page: http://www.courtesan.com/sudo/ and can still not find any examples of putting an entry type that I need into the sudoers file.

My current type entries are:

# Host alias specification

# User alias specification

# Cmnd alias specification

# Runas alias specification

# User privilege specification
root ALL=(ALL) ALL
joeDBA ALL=(ALL) ALL

I would like to give user joeDBA only certain privileges, not all of root's.

Thanks in advance...

jim

Re: sudo - configuring the sudoers file

RikTytgat — Thu, 20 Jul 2000 12:35:00 GMT

Hi,

What about:

# Host alias specification
Host_Alias HOSTS = aldebaran

# User alias specification
User_Alias ADMIN = rik

# Cmnd alias specification
Cmnd_Alias ADMIN_CMDS = /usr/bin/ksh, /bin/bash

# Runas alias specification
Runas_Alias ADMIN_RUNAS = root, oracle

# User privilege specification
root ALL = (ALL) ALL
ADMIN HOSTS = (ADMIN_RUNAS) ADMIN_CMDS

Above example works on my host.

Hope this helps,
Rik.

Re: sudo - configuring the sudoers file

Rick Garland — Thu, 20 Jul 2000 12:39:30 GMT

I have attached a sudoers file that I have been using. It doesn't contain the pfs_mount but I believe it will get you what you need.

Re: sudo - configuring the sudoers file

RikTytgat — Thu, 20 Jul 2000 12:41:10 GMT

Hi,
Forgot to mention that the sudoers manpage contains a good example.

See http://www.courtesan.com/sudo/man/sudoers.html

Bye,
Rik