1
vote
1answer
61 views

What are the most optimal permissions for /bin/su?

I want users to be able to use "sudo su -", but not to switch user by password. What are the most optimal permissions for /bin/su? Right now it's: -rwsr-xr-x. 1 root root 42436 Jul 26 18:19 /bin/su ...
-1
votes
2answers
135 views

su command works without prompting password

I'm on a RHEL server where the su command drops the user into root without prompting for a password. Obviously, this is a pretty big cause for concern which I'd like to fix. I'm not in contact with ...
0
votes
2answers
81 views

Linux: Apply ownership to all files created in folder

My first question, so be kind... Basically, I have a folder that a user group has access to. This folder has a program in it that runs as root(via sudo) then outputs result files(xml files) to a ...
1
vote
2answers
418 views

How can I create an “su” only user (no SSH or SFTP) and limit who can “su” into that account in RHEL5? [duplicate]

Possible Duplicate: How can I allow one user to su to another without allowing root access? We have a user account that our DBAs use (oracle). I do not want to set a password on this ...
2
votes
2answers
470 views

Why can't I run sudo -g?

$ sudo -u fish -g fish bash Sorry, user steve is not allowed to execute '/bin/bash' as fish:fish on myserver. $ sudo -u fish bash $ groups fish What's the -g option meant to be used for, and why I ...
1
vote
3answers
4k views

How to configure sudoers to always keep LD_LIBRARY_PATH envrionment variable?

No matter what I try, it seems that the LD_LIBRARY_PATH environment variable is not kept after I run a command with sudo. The only way I managed to have it stick, is to prefix my sudo command with ...
2
votes
2answers
58 views

What is the best method to define a list of commands and access one would need in order to administer a certain application?

My team needs to install and administer a very big application on Red Hat 5.7, and needs to be able to do so as root. During the project, the Unix support team (which is responsible for the OS ...
0
votes
2answers
808 views

Why does “sudo su - X” require password, but “sudo -u X bash” doesn't?

I know "why" questions are dangerous :) I have sudo access on RHEL, and noticed this: su -u fred su - Password: (I don't know fred's password). sudo -u fred bash [fred] $ Is there a way to not ...
0
votes
3answers
749 views

Can you copy a sudoers file from one server to another?

We've got a handful of RHEL5 servers and I was wondering if you could copy a master sudoer file from one of the Linux servrs and over write the default one on all the other servers and have it work?
1
vote
1answer
398 views

how to source with sudo -u

Redhat Linux using Bash I login in as myself sudo to another user sudo -u bash I want to call a bash_profile when I do this. When I run this, I get the following error bash: ...
0
votes
1answer
311 views

Deny ssh access to user but allow keyless ssh on some servers

Redhat 4/5: Ok so here's the deal. I need to lock down my servers and only allow users to log in via their ldap account. There's an application account that everyone uses, but I would rather have ...
2
votes
1answer
3k views

Setup RHEL/CentOS 5 to use SUDO in command line and X

How do I make CentOS/RHEL prompt me for my password (and not roots) when I run a privileged command. I have found many guides that detail how to do this for the command line but I want it to work ...
1
vote
1answer
566 views

Normal user can run command on one machine but must be root on another, how do I remove this restriction?

I have two machines. On one, a non-root user can run ethtool and gets output, on the other machine the same user gets sh: ethtool: command not found. If I sudo su - to be root, then ethtool is indeed ...
5
votes
2answers
2k views

sudo chown - prevent ../

Need to allow a user to chown files under a particular directory using sudo. This does the trick: user1 ALL= NOPASSWD: /bin/chown -[RPfchv] user2\:user2 /opt/some/path/[a-zA-Z0-9]* But, does not ...