topic Re: sudo for route adds in Operating System - HP-UX

sudo for route adds

someone_4 — Fri, 26 Apr 2002 19:23:45 GMT

Hi everyone,
I am trying to configure sudo so a Net admin can do a route add. I installed sudo version 1.6.2b1 and used the visudo command to try to configure it.

It looks like this:

# Host alias specification
Host_Alias LUPUS = lupus
# User alias specification
User_Alias OPERATOR = rleon2
# Cmnd alias specification

# User privilege specification
root ALL=(ALL) ALL
OPERATOR LUPUS = /usr/sbin/route
rleon2 ALL=/usr/sbin/route

But when I log in as rleon2 to test and see if i can do a route add. I get the error

Sorry, sudo must be setuid root.

What am i missing?

thanks,
- Richard

Re: sudo for route adds

S.K. Chan — Fri, 26 Apr 2002 19:30:42 GMT

Chmod your sudo program ..

# chmod 4111 sudo

SUID bit got to be set.

Re: sudo for route adds

Hai Nguyen_1 — Fri, 26 Apr 2002 19:31:19 GMT

Richard,

Check the mode bit of sudo.
It should ---s--x--x.
Otherwise, do this to set setuid as root.
# chmod 4111 sudo

Hai

Re: sudo for route adds

someone_4 — Fri, 26 Apr 2002 19:32:05 GMT

lol
I did

#chmod u+s sudo

and now it works it gives me
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these two things:

#1) Respect the privacy of others.
#2) Think before you type.

Password:
usage: add destination [netmask mask] gateway [metric]

..

How do I take that message off?

And in visudo

do i have to specify each augument?

- Richard

Re: sudo for route adds

Michael Tully — Fri, 26 Apr 2002 19:32:34 GMT

Richard,

This certainly seems a permissions problem with either you 'sudo' binary or the /etc/sudoers file itself.

The permissions on /etc/sudoers should be

440 root root

I am sure someone can find the correct permission on the binary (working at home)

Cheers
~Michael~

Re: sudo for route adds

Sachin Patel — Fri, 26 Apr 2002 19:40:31 GMT

Hi richard,
No you don't have to specify all arguments in /etc/sudoers file.
operator can run it like
sudo /usr/sbin/route arguments.....

Sachin

Re: sudo for route adds

S.K. Chan — Fri, 26 Apr 2002 19:56:16 GMT

I think the only way to not display the message is to set NOPASSWD in the /etc/sudoers file for a specific user. I'm not sure since I've never done that before. Check the "NOPASSWD and PASSWD" section in this URL ..

http://www.courtesan.com/sudo/man/sudoers.html

Re: sudo for route adds

someone_4 — Fri, 26 Apr 2002 20:00:43 GMT

All that worked and Mr. S.K that is the way to stop the message.

Richard

Re: sudo for route adds

Ed Sampson — Mon, 29 Apr 2002 16:44:34 GMT

The sudo warning message should only occur on the 1st usage for each user. After the user has a time stamp in the logs it should not appear again. I personally would not turnoff the passwd option, but that's up to up.

Ed