sudo is a tool which allows users to run commands as another user (usually the root user)

learn more… | top users | synonyms

2
votes
2answers
4k views

What to change in /etc/sudoers to allow restarting service?

I want an unprivileged user to be able to restart tomcat on my server. So I edited /etc/sudoers as follows username ALL=/etc/init.d/tomcat6 However, when the user runs /etc/init.d/tomcat6 restart ...
2
votes
2answers
49 views

Linux: Allow user to execute specific command on behalf of any other user

I am trying to find a way to allow user john to execute a command (say echo) on behalf of another user peter without being prompted for password. I found a thread that I thought would be the answer ...
1
vote
2answers
19 views

Prevent root in linux from changing folder permissions in GPFS filessystem

I have created a NFS export in a GPFS/SpectrumScale filesystem I created. I have enabled AD based authentication with our domain. Everything works. The NFS export was created with NFS4. The NFS ...
1
vote
1answer
15 views

Unable to mount NFS export unless I sudo to root

I created an NFS export on a GPFS/SpectrumScale filesystem I set up. I tested the NFS export on a xLinux, pLinux, z/OS and AIX succesfully. I then enabled AD based authentication on the NFS export ...
4
votes
4answers
5k views

check admin rights inside python script

How to check that my python script is running under Administrator rights (sudo) under BSD-like OS? Need to display user-friendly warning in order it is executed without admin rights.
0
votes
1answer
45 views

sudo and Kerberos on AWS Linux issues

We have an issue on some of our AWS machines, running Amazon's hacked Fedora/RHEL linux where newer-in-AD users can login with password but cannot autheticate for sudo. Users that were created in AD ...
0
votes
0answers
9 views

How to autostart node forever and spawn() as sudo?

My app periodically spawns a CasperJS scraper: spawn(CASPER_PATH, [SCRIPTS_PATH + fileName, '--ssl-protocol=any', '--user='+user, '--scrapeId='+scrapeId, '--pass='+pass], { ...
1
vote
0answers
19 views

How to run root commands form a website? [closed]

Im working on a project, in it I intend to make a website with server administartion functionalities. So far, I'm able to run all guest commands like ping,nmap,etc. But, I want to run root commands as ...
2
votes
1answer
30 views

Create a Web User

I am running Apache 2.4.8 on Arch Linux, but that doesn't matter really. I would like to create a user who is devoted to web management. I have created a user, a group, and added the user to the ...
1
vote
1answer
2k views

winbind separator and group name behavior in getent group, constantly changing

I have a problem that occasionally apprears-dissapears and it drives me nuts. My Debian servers are authenticated against AD and only "linuxadmins" group member can SSH to server and "sudo su". SSH ...
20
votes
8answers
13k views

Why do I not have syntax highlighting when I sudo vi <filename>?

I don't understand how to allow syntax highlighting in files I'm editing via vi when using sudo. When I 'sudo vi ' the terminal is only black & white of my terminal settings. In vi if I enter ...
-2
votes
1answer
24 views

Is it possible to “sudo su” using ssh in bash? [duplicate]

#!/bin/bash USERNAME=ksmith HOSTS="linux1" YUPDATE="sudo yum -y update" FIXDATE="sudo -u echo -e 'ZONE="America/New_York"\nUTC=true' > /etc/sysconfig/clock" for HOSTNAME in ${HOSTS} ; do ssh -tt ...
0
votes
0answers
41 views

sudo NFS SUID not working

Today I decided to move my NFS files from an ext4 HDD to an ext2 HDD using mc. Since then I am having trouble running the sudo command on all clients. When I try to run it I get an error saying ...
54
votes
5answers
13k views

How can I implement ansible with per-host passwords, securely?

I would like to use ansible to manage a group of existing servers. I have created an ansible_hosts file, and tested successfully (with the -K option) with commands that only target a single host ...
0
votes
1answer
70 views

sudo mv fails with “Operation not permitted”

When I command on my MacOS: > sudo mv /usr/bin/php /usr/bin/php-52 I get the result: mv: rename /usr/bin/php to /usr/bin/php-52: Operation not permitted What can I do? Thanks!
5
votes
1answer
82 views

Limit number of concurrent users switching to root account?

This is for Ubuntu 14.04 and Centos 7. I need to limit the number of users actively running as root. i.e. Logged in as root on the CLI. Basically, I want only one user at a time to be able to run ...
0
votes
0answers
17 views

cann't we have 32 bit uuid package installed along with 64 bit uuid package in ubuntu 12.04 64 bit

i am using 64 bit Ubuntu 12.04. i am trying to build 32 bit project in 64 bit Ubuntu OS. UUID generator related functions in a library. it is giving below linker error related to luuid: ...
1
vote
3answers
255 views

su to user that doesn't exist any longer?

I have an interesting situation, where a user's account has been temporarily removed (paperwork not renewed in time). However, thanks to the magic of "screen", his processes are still running. I ...
-3
votes
3answers
58 views

I want a user to run bash scripts with sudo [closed]

So this is for a school assignment. I have a working Bind9 and Apache2 server. I've written 3 scripts that make appropriate changes to the configuration files DNS add zone DNS add record HTTP add ...
0
votes
3answers
3k views

Root users and mysql: `sudo mysql` vs `/root/.my.cnf`

I have a /root/.my.cnf file which stores the mysql root user's password: [client] password = "my password" When I log in as system root and enter mysql, I get a passwordless login: myuser@local:$ ...
0
votes
1answer
180 views

Sudo-io log output shows garbled text

We have set up in our servers sudoers config the following configuration in order to log the console output for auditing purposes Defaults:%administrators log_output Defaults logfile=/var/log/sudo ...
3
votes
4answers
8k views

How to override a PATH environment variable in sudo?

I set PATH in /etc/profile. I do not have any problems in the case of the general user, but PATH does not go when I become the root authority in sudo. What would you do to override the PATH which is ...
3
votes
3answers
3k views

ec2-user password for running sudo -H -u

I have to run this command to initialize gitosis: sudo -H -u git gitosis-init < /home/ec2-user/id_rsa.pub But that asks me for a password for ec2-user: $ sudo -H -u git gitosis-init < ...
1
vote
1answer
208 views

Sudo Access for Active Directory Groups

I have my Linux machine connected to AD but I am unable to get sudo privileges. I can sign on using AD credentials, but sudo doesn't work. I have looked at everything I can find and everyone says to ...
7
votes
2answers
7k views

Running Ansible task as a specific user

I am trying to run a specific Ansible task as a different user than the one who is running the playbook. My .yml file looks like this: --- - hosts: staging_servers tasks: - name: check ...
0
votes
4answers
1k views

Ubuntu keep admin rights; skip entering password and sudo

I was wondering if there is a way to enter in my admin password someplace just once and keep it for my entire time logged in. I hate having to type sudo command-name* every five seconds, or typing in ...
27
votes
9answers
51k views

how to use xauth to run graphical application via other user on linux

My regular user account is, let's say, user1. I created separate user2 for some x application that i would like to run while being logged into x as user1 but in a way that will prevent it from ...
7
votes
6answers
17k views

Where is the sudoers file on Solaris?

Where is the sudoers file in Solaris? Is it different between Solaris versions (specifically, 9 and 10)?
0
votes
1answer
139 views

Ansible become_user not picking up path correctly

Here's the code showing what I believe is a problem: # Debugging path problems with sudo --- - hosts: webservers remote_user: root tasks: - name: echo path command: echo $PATH register: ...
1
vote
0answers
33 views

Using Ubuntu Server 14.04 as a webdeveloper [closed]

I have a Ubuntu Server 14.04 installed in my network used solely for development of websites (PHP, Laravel). Websites are located in their own directories under /var/www/domain.ext and can be accessed ...
9
votes
2answers
5k views

How to grant sudo rights only to specific script files?

I would like a user to have sudo rights (without password check) to a couple of shell scripts under a specific directory (in my case, /usr/local/tomcat7/bin), and to nowhere else. What's the simplest ...
4
votes
3answers
395 views

How to SSH after remotely restarting Redhat and enter recovery mode?

I need to enter recovery mode of my redhat box which is running remotely on a virtual machine. I use RedHat 5 64-bit Enterprise Edition. I am logged into the box using SSH. I can restart using the ...
1
vote
3answers
60 views

Run bash script as sudo from windows without interaction

I need to execute a bash script as sudo on a remote linux machine from TeamCity running on a windows box. I can execute the script fine from the cmd line using plink, but I am prompted for a ...
3
votes
0answers
218 views

Running service with systemd as default user via ansible in ec2 (requests password)

I'm trying to employ the following Ansible script (part of a playbook) to run unicorn via systemd for a rails app on EC2 (micro) instance: --- - name: restart unicorn command: psql -h {{ db_host ...
2
votes
2answers
2k views

Running sudo commands in cloud-init script

I'm developing an automatic bootstrapper for some servers as we are using Amazon EC2 for our infrastructure. What I do is: run a Fabric script which connects to EC2 and initializes a new instance, ...
0
votes
0answers
9 views

Appropriate user permissions for reading private dkim file contents from web app

As it stands, when sending email using clients like Thunderbird, my messages get signed with DKIM. However when generating emails from a web application, they do not get signed. As it stands I've ...
3
votes
4answers
2k views

Why doesn't sudo -E actually preserve my environment?

I'm trying to sudo some binaries that lies in a custom path. That custom path is removed when I run sudo though, but sudo -E should preserve my path. Why doesn't it work? $ env | egrep ^PATH ...
88
votes
9answers
35k views

ssh-agent forwarding and sudo to another user

If I have a server A into which I can login with my ssh key and I have the ability to "sudo su - otheruser", I lose key forwarding, because the env variables are removed and the socket is only ...
23
votes
2answers
2k views

Why does password entering work in a piped sudo command?

If I do: sudo cat /etc/resolv.conf | less It will prompt me for the password, even though less (presumably) takes stdin. Over what fd's is the password prompt shown and how does it get the input ...
7
votes
12answers
6k views

How can you prevent root password change on linux?

I'm setting up a server which other people will have sudo access to via ssh. They can install stuff and make changes as they see fit, however I still need to manage the server, install patches and ...
-1
votes
2answers
31 views

debugging sudo -i -u www-data -g www-data env

When I run sudo -i -u www-data -g www-data env I get sudo: unable to change directory to /var/www: No such file or directory This must be coming from script somewhere, but I don't know where. How ...
1
vote
1answer
50 views

Executing php as sudo inside crontab [duplicate]

I've wrote a PHP-Script, and the execution requires sudo permission, because it executes some other system related stuff. So i've added this into the crontab -e but i can't see, that my script is ...
1
vote
0answers
18 views

restoring debian user access

I have accidentally set the owner for all files and folders in the /home folder to 'root' (and a lot of other folders also) and now when I ssh into the server as myusername, I get the following error: ...
5
votes
4answers
6k views

sudo: must be setuid root (Mac OS X)

I ran $ sudo chown -R $USER /usr/bin and now when I try to run programs under the /usr/bin path as sudo I get sudo:must be setuid root What should I do if I would like to revert the chown?
1
vote
0answers
46 views

audisp-remote signal USR1 works as root, not with sudo

So I have a weird problem that I'm running out of ideas to troubleshoot. My RedHat machines are using audisp-remote to send syslog messages to a central server. audisp-remote will respond to the ...
-1
votes
0answers
12 views

Give Non Root group of Users access to start mysqld service [duplicate]

I have a Non Root User abc,abc2..... I want to add this to a group of users and want to give the group of user ssudo rights only to restart, start or stop - mysqld service. i.e sudo service mysqld ...
1
vote
2answers
85 views

Give Non Root user access to start mysqld service

I have a Non Root User abc and want to give the user sudo rights only to restart, start or stop - mysqld service. i.e sudo service mysqld restart. How can I do it so? I would like to do the same ...
2
votes
2answers
89 views

Setting password on sudo su for Amazon EC2 Instance

Our staging server is on an Amazon EC2 instnace. When you ssh into it you can execute a sudo command or sudo su without having to enter a password. Is there anyway I can require a password from a ...
0
votes
1answer
148 views

Why does my Upstart job work with sudo but not with setuid?

I have an Upstart job for a Node.js application, and I want to make it run Node as the node user rather than root. When I use setuid in the job config, whenever I try to start the job, it says my-app ...
1
vote
2answers
7k views

Having users su/sudo in Linux based on Active Directory group when using pam_winbind

I'm using openSUSE 11.4 which has Active Directory configuration built-in to Yast (which does all the pam_winbind, Kerberos, nss, Samba-client stuff for you) and I can successfully authenticate ...