One my server, I've given the main user for the web server, access to /usr/bin and /tmp. I did this so that ceartain scripts could could call exim without this user needing to have full sudo rights.
Now I'm wanting to add full sudo rights to this particular user through the ALL = (ALL) syntax.
My question is this, if I convert the user = /usr/bin, /tmp syntax to the full sudo, will those same scripts work. I know when you enter sudo one the command line you need to enter a password. But the aforementioned scripts are running via cron, and right now they don't require a password when they run. So will granting this user full admin rights, change this?
I know maybe this is a simple question, but I don't want to make an avoidable mistake on something so simple.
Some more details for you. This user account in question, is the same user that 'owns' all of the publicly facing web pages. I just want to have a full sudo user for admin tasks without having to login as root. From a security standpoint, would you ever give full sudo rights to the user that owns the files served by the web server? Or would you just create another user just for administration?
Thanks for your help!