Re: restrict sudo

["bostonlinuxandunix" <user=37@nabble.blu.org>]

 You specified "(MADMINS)". The thing in parentheses says to run as 
this user. You didn't define a Runas_Alias for MADMINS. 

Also, you defined Cmnd_Alias, but you give permission for mailuser1 to 
run ALL commands; you're not using the Cmnd_Alias that you defined. 

You're allowing this for all machines. If the sudoers file is local to the 
one machine, then this doesn't matter; it would be relevant if sudoers 
was coming from NIS or LDAP. 

If you want mailuser1 to be able to run /bin/mv as root, you could use 
the following rule: 

MADMINS    ALL=MADMINS 


On Wed, Jul 30, 2008 at 1:43 PM, Dave Peters <[hidden email]> wrote: 
> All, 
> 
> I try to limit the sudo user access and add the following to the /etc/sudoers 
> 
> ********************* 
> User_Alias MADMINS = mailuser1 
> 
> # MADMINS 
> Cmnd_Alias MADMINS  = /bin/mv /var/log/ 
> 
> # MADMINS with no password need 
> MADMINS      ALL=(MADMINS)  NOPASSWD: ALL 
> ********************* 
> I got the following error: 
> Warning: undeclared Runas_Alias `MADMINS' referenced near line 93 
> 
> Did I do something wrong? If anyone can help? 
> 
> Thanks. 
> 
> --Dave 
> 
> 
> 
> 
> 
> 
> 
> 
> -- 
> This message has been scanned for viruses and 
> dangerous content by MailScanner, and is 
> believed to be clean. 
> 
> _______________________________________________ 
> Discuss mailing list 
> [hidden email] 
> http://lists.blu.org/mailman/listinfo/discuss
>