up vote 3 down vote favorite
1
share [g+] share [fb]

I know how to create a command which a given user can execute via sudo. I have a given command I want to allow any user to be able to execute via sudo without entering a password. What would I put in my /etc/sudoers file in order to make that happen?

link|improve this question
85% accept rate
feedback

2 Answers

up vote 7 down vote accepted

A section like this in your sudoers is probably what you want.

Cmnd_Alias NAMEOFTHIS=/usr/bin/program
ALL ALL=NOPASSWD: NAMEOFTHIS
link|improve this answer
Doesn't that grant access just to user username? Is there a wildcard I can use instead? I want any authenticated user to be able to execute the command. – Josh Sep 23 '10 at 19:07
Then use a group they are all members of. – Broam Sep 23 '10 at 19:10
Thanks! I swear I tried that but I forgot a space, so it wasn't working! – Josh Sep 23 '10 at 19:10
@Broam: they're not all members of a single group, and I wanted an easier solution. – Josh Sep 23 '10 at 19:10
If it's not all users, I'd add a group simply because this is membership of something you wish to track - who can sudo this way. – Broam Sep 27 '10 at 15:45
feedback
up vote 2 down vote

You might consider the SUID bit. Certain programs require root privileges and use the SUID bit, such as passwd.

If sudo is the better choice for you, you could use:

ALL ALL=NOPASSWD: /path/to/command
link|improve this answer
1  
It's a shell script which restarts a local caching nameserver... so SUID won't work in this case, right? – Josh Sep 23 '10 at 19:05
Zoredache beat me in the time it took for me to test my recommended solution. =) – Warner Sep 23 '10 at 19:12
While he was simultaneously harassing me in chat for posting such an easy question, no less! – Josh Sep 23 '10 at 19:17
1  
@Josh:then don't post easy questions :-) – Bart Silverstrim Sep 24 '10 at 13:25
1  
@Josh: Sounds like a neat feature, actually. Multiharassitasking. – Bart Silverstrim Sep 24 '10 at 13:44
show 1 more comment
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.