topic Re: tar in Operating System - Linux

tar

kunjuttan — Sat, 30 Jan 2010 06:28:37 GMT

Hi,
I want to make one my user use tar command for backup.How can I able to do that??

Re: tar

Jupinder Bedi — Sat, 30 Jan 2010 09:55:48 GMT

Hi dipesh ,

you can give the access by sudo . install sudo on your system if not installed and than visudo

make the entry and save the file .
Than do su to that particular user and run sudo -l

it will show you that user has access to run tar command

Thats all

Re: tar

kunjuttan — Sat, 30 Jan 2010 10:02:26 GMT

Thanks.Can you give me some more information.Is it possible in RHEL?From whre I will get sudo package?Is it free?

Re: tar

Jupinder Bedi — Sat, 30 Jan 2010 10:13:16 GMT

yes this package is 100% free . you can download it from any website. following are the links

http://www.icewalkers.com/Linux/Software/533590/Sudo.html

http://linux.softpedia.com/get/Programming/Widgets/Perl-Modules/Sudo-36009.shtml

Re: tar

kunjuttan — Sat, 30 Jan 2010 10:33:37 GMT

after installing what is to be done??visudo??

Re: tar

Jupinder Bedi — Sat, 30 Jan 2010 11:01:22 GMT

after installing di visudo and edit the line at bottom

username ALL=(ALL) NOPASSWD: tar

Re: tar

Steven Schweda — Sat, 30 Jan 2010 15:04:46 GMT

I don't use sudo, so I know nothing, but it
seems to me that allowing a non-root user to
run "tar" as root effectively gives that user
read and write access to any file on the
system. If you trust this user so much, then
why not give him the root password?

It might make more sense to write a script
which does some specific (limited) backup
task(s) using "tar", and then allow a
non-root user to run that _script_ as root.

Re: tar

dirk dierickx — Mon, 01 Feb 2010 08:51:53 GMT

giving somebody root is crazy, they have _full_ control of the whole system. give them sudo access to tar and they can only do tar as root.

now, you can even configure it so that the user can only create tar packages of a system, and not expand, so reducing the risk of the user overwriting the whole FS etc.

sudo is the way to go. i'm an admin, and i don't even use the root account.

Re: tar

Steven Schweda — Mon, 01 Feb 2010 13:05:25 GMT

> [...] giving somebody root is crazy, [...]

I didn't say that it was wise, only that
unrestricted "tar" use is not much different.

> now, you can even configure it [...]

I suggested one way to do that. What's your
suggestion?

> sudo is the way to go. [...]

It's certainly one useful method, when used
properly. When used improperly, its benefits
may be greatly reduced.