[sudo-users] Allow user to run command with specific arguments

Bernard Fay bernard.fay at gmail.com
Tue Aug 7 05:15:33 MDT 2018


I do not know what I did wrong on the first try but it works today....
Looks like a RC=18 ��



On Fri, Aug 3, 2018 at 12:04 PM Todd C. Miller <Todd.Miller at sudo.ws> wrote:

> On Thu, 02 Aug 2018 13:26:12 -0400, Bernard Fay wrote:
>
> > I try to configure sudoers to allow a user to execute "/sbin/multipath
> -l"
> > and only the -l argument, none of the other arguments available to
> > multipath.
>
> What are you trying to achieve?  Do you want users to be able to
> only run "multipath -l" or do you need the user to be able to specify
> a device argument after the "-l"?
>
> If you want the user to be able to specify a device you'll probably
> need to write a wrapper script and give the user sudo access to
> that.  You can't securely do command line argument filters in sudoers
> since Linux will let you mix options and arguments.
>
> If you just want the user to be able to run "multipath -l" then
> your first attempt should work, e.g.
>
> Cmnd_Alias      MPATHL    = /sbin/multipath -l
>
>  - todd
>


More information about the sudo-users mailing list