[sudo-users] [sudo-workers] Installing Application without full sudo privilege

Eric Haszlakiewicz erh at nimenees.com
Fri Feb 13 10:39:40 EST 2009


On Fri, Feb 13, 2009 at 09:23:31AM -0500, Asif Iqbal wrote:
> Hi All
> 
> My application team needs to install Oracle on hosts. They are asking
> for full sudo privilege, so that they can install app as root.
> 
> Is there a lesser privilege that you can suggest then
>   user ALL=(ALL) ALL

If you're giving them access to run any program that they provide or 
have control over, then any lesser privilege is no different than the
above because they can just change the program they are running to do
what they want.  You either need to trust them to behave themelves,
or watch over their shoulder as they install it.

eric



More information about the sudo-users mailing list