[sudo-users] Giving access to one app for all users

Galen Johnson Galen.Johnson at sas.com
Tue May 23 15:56:35 EDT 2006


You still need to provide the user list to run as...either as a Run_as alias or individual userids... 
"%users  ALL= NOPASSWD: PRINTING" should be "%users  ALL = (ALL) NOPASSWD: PRINTING" or "%users  ALL = (root)NOPASSWD: PRINTING"

=G=


-----Original Message-----
From: sudo-users-bounces at courtesan.com [mailto:sudo-users-bounces at courtesan.com] On Behalf Of Paul Thompson
Sent: Tuesday, May 23, 2006 12:18 PM
To: sudo-users at sudo.ws
Subject: Re: [sudo-users] Giving access to one app for all users


On 22-May-06, at 8:58 AM, Micha wrote:

>
> I had a short look on a neighbours Mac OS X, and
> /etc actually is a symlink to the /private/etc/ directory.
> This is the path also mentioned in the sudo manpage.
> I'm very unfamiliar with this system, and there was very
> little time, i'm sorry i couldn't investigate it thoroughly.
> Anyway, i suggest Paul post the complete sudoers file
> here, (with all comments) to see the groups and if there
> could be more things involved.
>
> --
> Micha

   Hi Micha,

   Thank you for your suggestion.  Here is my current complete  
sudoers file.  I have been trying to modifiy it so that na  
application which asks for a local admin name and password will no  
longer ask for it and just run.

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers  
file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification
Cmnd_Alias PRINTING = /Applications/PrintScrip.app

# Defaults specification

# Runas alias specification

# User privilege specification
root    ALL=(ALL) ALL
%admin  ALL=(ALL) ALL
%users  ALL= NOPASSWD: PRINTING

# Uncomment to allow people in group wheel to run all commands
# %wheel        ALL=(ALL)       ALL

# Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now

   Is there anything I should post?

   Thank you,

   Paul
____________________________________________________________ 
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users




More information about the sudo-users mailing list