Sudo How to ..?

Sudo (superuser do) allows a system administrator to work using his own account and switch to root or other user identity available on the system only for commands that need it.



Here i have added four users ashish, akshay, agent and mach for this tutorial to make them sudo users.

Log File for Sudo :

/var/log/messages

SUDO file:

/etc/sudoers

What we will do here:

1. User "ashish" will have access of all commands as root, but with password.
2. User "akshay" will have access of all commands as root, but without password.
3. User "agent" will have limited access of network service, but with password.
4. User "mach" will have limited access of adding users & setting password for them, with password.


To Set sudo users,

#visudo

To set access for Users "Ashish" and "Akshay" add entry as below after "root    ALL=(ALL)       ALL",

ashish  ALL=(ALL)       ALL
akshay  ALL=(ALL)       NOPASSWD: ALL

To set Network service access for user "agent" with Password,

  User_Alias NETSERVICE=agent
Cmnd_Alias NETSERVICE_CMDS=/etc/init.d/network
NETSERVICE ALL=NETSERVICE_CMDS

To give access to user "mach" for two commands "useradd" and "passwd" with passwd

User_Alias LOGIN=mach
Cmnd_Alias LOGIN_CMDS=/usr/sbin/useradd, /usr/bin/passwd
LOGIN ALL=LOGIN_CMDS


Now login with each user & verify .


You will notice here :

1. User "ashish" will have full command access with below syntex, Login with User "ashish";

$sudo fdisk -l

It'll ask for password & show you result.


2. User "akshay" will have full command access with below syntex, Login with User "akshay";

$sudo fdisk -l

It'll not ask you any password & directly show you results.


3. User "agent" will have only network service access with below syntex, Login with User "agent";

$sudo /etc/init.d/network restart {You can also use "start, stop, status" options}

It'll ask for password & show you result.


4. User "mach" will have access for two commands "useradd & passwd" with below syntex, Login with User "mach";

$sudo useradd User1 {Can add User}

$sudo passwd User1 {Can set password for any user}

It'll ask for password & show you result.



_Enjoy  :)

Comments

Post a Comment

Popular posts from this blog

Recover or restore initramfs file in RHEL or CentOS 7

Image
What if "initramfs" file is deleted or corrupted on your RHEL or CentOS 7 ? Lets know what is initramfs image ? The INITial RAM Disk (initrd) is an initial root file system that usually get mounted prior to when the real root file system gets available. The "initrd" image is also known as "initramfs (Initial RAM FileSystem)" from RHEL 6.x onwards. The initrd/initramfs gets bound to the kernel and loaded as part of the kernel boot procedure. The kernel then mounts this initrd/initramfs as part of the two-stage boot process to load the modules to make the real file systems available and mount's the real root file system. Initrd/Initramfs image provides the capability to load a RAM disk by the boot loader. This RAM disk can then be mounted as the root filesystem and programs can be run from it. Afterwards, a new root file system can be mounted from a different device. The previous root filesystem which was mounted from initrd/initramfs is then
Read more

Space reclamation / UNMAP on RHEL or CentOS 7

What is Space Reclamation? This feature supports Thin Provisioned environment, and it is the process of freeing space from the storage system that has already been freed from the host file system. A host file system contains metadata to keep track to know which blocks are available to store new data and which blocks contain actual data and must not be overwritten. This metadata is stored within the LUN. When a file is deleted in the host file system, the file system metadata is updated to mark that file's blocks as free space. Total file system free space is then recalculated to include the newly-freed blocks. To the storage system, these metadata updates appear no different than any other writes being performed by the host. Therefore, the storage system is unaware that any deletions have occurred. What is Unmapping? Unmapping is a process which de-allocates relationship between LBA and a physical block in a logical unit. Reclamation within RHEL and CentOS: RHEL / Ce
Read more

How to recover /boot partition on RHEL or CentOS 7?

Image
What if mistakenly you delete all the files from /boot partition or files got corrupted due to some reason ! You will see below error on the screen at the time of system boot. But there is a way to recover /boot partition files :) Follow these steps to recover /boot partition : Step 1 :  Mount RHEL or CentOS 7 ISO image on your physical server and boot from it. In case you are using HPE Prolient server you can mount this ISO image on iLO, if this is virtual environment then mount it accordingly and reboot server or VM from ISO. Once rebooted you will see below options: Step 2 :  Scroll down and select "Troubleshooting" option from menu and PRESS "Enter" Step 3 :  Select "Rescue a CentOS system" and press ENTER: Step 4 :  Press ENTER key again to continue: Step 5 :  To continue, Type "1" and press ENTER, this will bring you to rescue mode, chroot sysimage filesystem using below command:
Read more