Home / server / Questions / 330663
Accepted
Aha
Asked: 2011-11-14 22:52:07 +0800 CST

sudo - new user with command list

  • 772

The following will allow newuser to run any commands anywhere? How can I prevent it by allowing the user to run certain commands only? 

visudo

## Allow root to run any commands anywhere
root    ALL=(ALL)       ALL
newuser ALL=(ALL)       ALL
fedora

2 Answers

  1. Best Answer

    You can create a command alias for newuser e.g.

    Cmnd_Alias    NEWUSER_CMDS = /path/to/cmd1, /path/to/cmd2, /path/to/cmd3

    then use that as part of the user specification

    newuser ALL=(ALL) NEWUSER_CMDS
    • 5 
  2. newuser ALL=(ALL)       /path/to/your/command

    Read User Specification section in the man sudoers page for more details.

    • 3