[sudo-users] (Hopefully) quick policy question

Jore community at thoughtmaybe.com
Tue Sep 26 17:46:48 MDT 2023


On 27/9/23 8:29 am, Mihai Moldovan wrote:
> * On 9/26/23 20:18, Jore wrote:
>>      test ALL = NOPASSWD: /usr/bin/bash /home/test/acme-wrapper.sh *
>>
>>
>> Regardless, when test user runs:
>>
>> $ bash /home/test/acme-wrapper.sh foobar123.example.com
>> /usr/bin/bash: /root/.acme.sh/acme.sh: Permission denied
>>
> Because you probably meant to execute sudo bash /home/test/acme-wrapper.sh
> foobar123.example.com? :)

But I did execute that.

If you check the wrapper script, it calls '/root/.acme.sh/acme.sh' which 
isn't being run as superuser, which is the error reported as above.

What am I doing wrong here?




More information about the sudo-users mailing list