[sudo-users] [sudo-workers] Installing Application without full sudo privilege
erh at nimenees.com
Fri Feb 13 10:39:40 EST 2009
On Fri, Feb 13, 2009 at 09:23:31AM -0500, Asif Iqbal wrote:
> Hi All
> My application team needs to install Oracle on hosts. They are asking
> for full sudo privilege, so that they can install app as root.
> Is there a lesser privilege that you can suggest then
> user ALL=(ALL) ALL
If you're giving them access to run any program that they provide or
have control over, then any lesser privilege is no different than the
above because they can just change the program they are running to do
what they want. You either need to trust them to behave themelves,
or watch over their shoulder as they install it.
More information about the sudo-users