[sudo-users] Command with argument not working as expected
GMenini at ose.com.uy
Wed Feb 3 12:33:05 EST 2010
Since I want users to chmod files only under certain directory, I have the
following in my /etc/sudoers file:
# User alias specification
User_Alias ADMINS = myname,yourname
# Cmnd alias specification
Cmnd_Alias CHMOD = /usr/bin/chmod /dir/where/chmod/is/allowed/*
# Runas alias specification
# User privilege specification
root ALL=(ALL) ALL
ADMINS myhostname=(root) CHMOD,sudoedit /dir/where/chmod/is/allowed/*
[..file continues here; omitted for simplicity...]
The sudoers file listed above doesn't allow to chmod on that dir.
My target is: ADMINS are able to create scripts in `
/dir/where/chmod/is/allowed/' and then make them executables.
However, until now I've just been able to set ADMINS to issue chmod on a
system wide basis but this behaviour is not as expected --not to mention
it's an enormous security flaw!
Sudo version 1.7.0
OS: IBM Unix AIX 184.108.40.206
More information about the sudo-users