39
votes
6answers
3k views

Is it OK to set up passwordless `sudo` on a cloud server?

Sorry if the question is vague but I don't know a better way to ask and I didn't see the caveats/tradeoffs of the approach discussed here. I love the idea of accessing servers via keys, so that I ...
0
votes
0answers
29 views

visudo passes syntax check but the file fails when put into place

I've been trying to create a modified sudoers file in /etc/sudoers.d/ but am having trouble. visudo -cf /file/path shows no syntax issues, but when i mv /tmp/sudoers/ /etc/sudoers.d/sudoers sudo ...
0
votes
1answer
417 views

Root Locked Out of Ubuntu 12.04?

I may have just locked root out of my server, and am looking for help. I have a VPS web server that has been running 10.04 for the past couple of years. For security, I had disabled root login and ...
1
vote
1answer
359 views

Security implications of adding www-data to /etc/sudoers to run php-cgi as a different user

What I really want to do is allow the 'www-data' user to have the ability to launch php-cgi as another user. I just want to make sure that I fully understand the security implications. The server ...
4
votes
2answers
158 views

best ways allowing a group to edit some /etc files

we have a group called JBossAdmins and users of this group must edit some /etc files on a RHEL 6: /etc/httpd/* /etc/java/* /etc/jboss/* my first idea was to give the following sudo permissions: ...
1
vote
1answer
1k views

How to edit /etc/sudoers to allow a user to run specific shell scripts?

I have a few scripts in a directory which I need www-data to run (from PHP) with root permissions. It seems like CMND_ALIAS= /path/to/script, /bin/sh www-data ALL=(ALL) NOPASSWD: CMND_ALIAS gives ...
4
votes
2answers
2k views

Execute build task in Hudson with root privilages

I have a build script which executes apt-get and therefore requires root privileges. What is the best way to run this script in Hudson? Currently the only solution I have found that works is to add ...
0
votes
3answers
775 views

Is it dangerous to allow every user to run nmap as root?

At our university we have some computers in the "networking lab", that are configured to allow everybody to run nmap as root via /etc/sudoers. Could this be a security vulnerability?
5
votes
2answers
2k views

sudo chown - prevent ../

Need to allow a user to chown files under a particular directory using sudo. This does the trick: user1 ALL= NOPASSWD: /bin/chown -[RPfchv] user2\:user2 /opt/some/path/[a-zA-Z0-9]* But, does not ...