Allow common user run some commands

[Gustavo Souza Lima]

Hi,

I would like to know how to allow a common user to execute lvm commands on Unix operating system without typing the root's password.

Regards,
Gustavo

[Robert-Jan Goossens · Accepted solution]

Hi Gustavo,

Yes, you could setup sudo.

Sofware
http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.9p15/

Docs
http://www.aplawrence.com/Basics/sudo.html

Regards,
Robert-Jan

[James R. Ferguson]

Hi Gustavo:

While I agree with Robert-Jan that 'sudo' is an appropriate choice if you must, I have to ask WHY?

Why would you want a non-root user to execute LVM commands? Certainly, you don't want configuration changes made! Which command(s) do the non-root users need and what is it from their output that is required?

Regards!

...JRF...

[Gustavo Souza Lima]

Thank you for the Answers guys...

James,

I would like do this because in my company the root user will be used only in an extreme situation, such as, re-configure kernel. But to execute daily tasks, such as, create a new user or extend a filesystem, volume group or lvol, I would like to use a non-root user because I could audit what that user did.

Did you understand what I meant??

If you have another solution, please let me know...

[Sp4admin]

Hi Gustavo,

What you have described is the daily task on system admin. As he/she would need to use the root login to achieve these task. I don't quite understand. If your worried about command being issued you can create audit logs to have monitor what going on. Anyway 'SUDO" would be your best bet to allow non root users to issue root commands.

Just my $0.02
Sp,

[Jeeshan]

Hi

If you wanna track the user, you can go for SUDO.

If the user is trusted !!!!!, you can go for ACL.