/etc/sudoers -- support

I have edited the file /etc/sudoers in order to allow my self to run some commands with not having the need to access the root account, this is my file

I have added those lines but its not seem to be working, could someone correct me, Thanks.

moderator ALL=/sbin/ifconfig, /sbin/ifconfig eth0 *, /etc/rc.d/rc.inet1 start
moderator localhost=/sbin/shutdown -h now

Code:

---

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# Runas alias specification

# User privilege specification
root    ALL=(ALL) ALL
moderator ALL=/sbin/ifconfig, /sbin/ifconfig eth0 *, /etc/rc.d/rc.inet1 start
moderator localhost=/sbin/shutdown -h now

# Uncomment to allow people in group wheel to run all commands
# %wheel        ALL=(ALL)      ALL

# Same thing without a password
# %wheel        ALL=(ALL)      NOPASSWD: ALL

---

Have you edited it with the visudo command? And you don't respect the syntax... Should be [user] ALL=(ALL) command.

I suggest you do some reading on sudo before starting to mess with it :).

Quote:

---

Originally Posted by borromini

Have you edited it with the visudo command? And you don't respect the syntax... Should be [user] ALL=(ALL) command.

I suggest you do some reading on sudo before starting to mess with it :).

---

I did some reading.

thats how I open the file
cd /etc
then
visudo

when I looked at the example in the file
# %users localhost=/sbin/shutdown -h now

I just simple replaced the %users with the username 'moderator'

Do it like this:
# visudo -f /etc/sudoers


That way visudo will check the syntax when you close the modified file. Have you checked if the path is correct?

Anyway, I checked some info on visudo, you do respect the syntax :). My bad! I don't know if you can add more commands to one line though. I think you should put one line for each command.

Code:

---

moderator ALL=/sbin/ifconfig, /sbin/ifconfig eth0 *, /etc/rc.d/rc.inet1 start

---

try it without the spaces between the commands, and remove the wildcard (*).

is the user "moderator" also in the group wheel?

aint working, that paths are correct, if i do

moderator ALL=/sbin/ifconfig eth0 down

i got permission denied

Code:

---

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# Runas alias specification

# User privilege specification
root    ALL=(ALL) ALL
moderator ALL=/sbin/ifconfig
moderator ALL=/sbin/ifconfig eth0 down
moderator ALL=/etc/rc.d/rc.inet1 start
moderator localhost=/sbin/shutdown -h now

---

and this is when i close the file:

skipping 3 old session files
reading /etc/sudoers.tmp

Quote:

---

Originally Posted by alain_

is the user "moderator" also in the group wheel?

---

not sure of that? how can I know

Code:

---

grep wheel /etc/group

---

and see if moderator is in it.

Do I have to Uncomment this line?

# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL

if you uncomment that line, everybody who is member of the group wheel can give "all" commands,'
i don't hink you want that ;)
but it could be usefull to debug