1

I have a command that I run via sudo. This command needs to have its working directory set to the directory where the command is installed. The user that calls sudo has no permissions in this directory so I can not cd beforehand.

So basically what I like to be able to inlude in /etc/sudoers is something like :

appuser localhost = (appowner) NOPASSWD: cd /opt/app/bin \; ./binary

I know I can use a wrapper script around binary but I would rather not... Any suggestions?

Improve this question
2
  • 1
    Why would you rather not use a script?
    – Skyhawk
    Jan 2, 2013 at 9:11
  • Mostly because using wrappers would add another place to check when something goes wrong while running the application...
    – Willem
    Jan 2, 2013 at 9:41

1 Answer 1

Reset to default
3

You will have to use a wrapper script. The parameters following the Runas Tag_Spec is interpreted as a Cmnd_List which is a list of commands that can be run by the specified user etc.

The solution is, as you note to use a wrapper script

appuser localhost = (appowner) NOPASSWD: /path/to/wrapper

Make sure that the wrapper script has suitable permissions and especially that it's not writeable.

Improve this answer
1
  • That's what I was afraid for :-) Thanks for clarifying @Iain
    – Willem
    Jan 2, 2013 at 9:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .