Sudo Question

[Waqar Razi]

I have been asked to give access to one user to bring up and shutdown the application. I have used sudo before to give some one root access to perform some tasks that need root priveleges. To start and stop this particular application, you need to ORACLE and not ROOT.

Can some one advice if we can implement this using sudo, i-e, grant some one priveleges of the oracle user to start and stop the application scripts.

[Tim Nelson]

how about something like this..

Cmnd_Alias APP = /apps/scripts/app_control.ksh

oracle server1=(appuser1,appuser2) NOPASSWD:APP

[Waqar Razi]

Can u please explain it in more detail?

Is that possible to grant some one to launch the startup and shutdown scripts as oracle (just these scripts launching as oracle and not any other thing as oracle) using sudo.

If you can provide more details and steps, I would really appreciate it.

[Tim Nelson]

edit /etc/sudoers with visudo

you can create a command alias with a list of commands that can be executed.

Cmnd_Alias APP_SHUTDOWN = /path/to/script1, /path/to/script2

then

give oracle permission to execute it as the application user appuser1


oracle localhost=(appuser1) NOPASSWD:APP_SHUTDOWN

or skip the cmnd_alias

oracle localhost=(appuser1) NOPASSWD:/path/to/script


then logged in as oracle
sudo -u appuser1 /path/to/script

[Waqar Razi]

Let me make it more clear:

The user name is user1.

The user logs in to the system as user1.

Can he run some scripts as oracle user using sudo. The script needs to be run as oracle and not as root.

[Tim Nelson · Accepted solution]

how about this way then...

user1 localhost=(oracle) NOPASSWD:/path/to/script

[Patrick Wallek]

The user would then run the script as:

$ sudo -u oracle /path/to/script

[bullz]

Hope u have already got enough replies.

Just FYI..

sudo su - oracle
#Login as oracle and do whatever you want :)