I would like to configure visudo to authorize user to start only one application with sudo on one peculiar host and forbid everything else so, after reading the man, I came up with :
Code:
Select alluser    ALL = (ALL:ALL) !ALL
user    host_name = /usr/bin/application
But it does not seem to work.
I need to add a user to the sudoers in my vps host and edit a couple of files and I just cannot make sense of visudo, vi or nano. The tutorials I find on the net just take too long to study and they are never complete, can someone explain what I need to do? I am running Debian 506.
View 8 Replies View Relatedis there a way to allow a program mounting a drive without requiring it to ask for sudo password (apart from running it with sudo)? To be more specific, I'm annoyed by the sudo password request by TrueCrypt whenever it needs to mount a volume.
I've thought about creating another user, allowing it to mount volumes and then running TrueCrypt as this user at boot. I don't know whether GNU/Linux allows for such policies... maybe I should look into SELinux?
EDIT: For the issue at hand (encrypted USB stick both on Windows and Linux), I'm investigating FreeOTFE. I'm still curious about the privileges issue, anyway.
So the question is simple what I need is to run file.sh after user logs into desktop LXDE.
Ive been trying whole day tried to put my file.sh into /etc/init.d and ever created symbolic link to /etc/rc4.d etc..
BUT after I log into desktop nothing happens?
I am coming from ubntu there it was easy just add that script into startup applications.
I am using debian squeeze server with asterisk 1.6 installed and configured.my problem is non root users need to access the server using ssh and restart asterisk server after making changes in asterisk configuration files.As of now i am giving root username/password for this process (i know it is not at all a good idea) .now how can i create a username and configure it which can only access and modify asterisk configuration files and restart asterisk server without any other privileges.
View 1 Replies View RelatedHere is my scenario, I want to create about 3 groups of users:
--Admins-create and manage users
--Support1-Restart basic stack apps(httpd, mysql etc)
--Support2 Backups
So in my sudoers file i have managed to set them all up to perform the tasks above. However, I want to limit the users in the specific groups from running commands from other groups. eg a user in admins shouldnt be able to restart the stack applications etc. I have tried using the ! to create an exception eg !/etc/init.d/httpd start for the users but its not working.
I was trying to make shutdown without root user using visudoI tried the following still it did not work for mehawk ALL=NOPASSWD:/sbin/shutdown -h now
View 6 Replies View RelatedLooking through syslog, I see some peculiar messages that occur when booting my Debian machine up. Can anyone explain to me, why it seams to think my filesystem is read only, and what do the other messages mean? Is there anything I need to start worrying about?
Feb 26 08:48:21 chris-desktop kernel: [ 4.082355] EXT3-fs (sdb3): recovery required on readonly filesystem
Feb 26 08:48:21 chris-desktop kernel: [ 4.082361] EXT3-fs (sdb3): write access will be enabled during recovery
[code]....
I am having no luck configuring ProFTPd on a Debian Lenny production server we use to host our MySQL databases and a few websites. I had originally set it up so I could login and manage our internal sites, but I have the need to allow a few clients in to access their sites that we host. I am trying to root the users in their site directory, which would be "/sites/www.whatever.com/".
It just hit me while typing this. Is it possible to create a user without a shell to prevent login via SSH and set the home folder to /sites/whatever instead of /home/username? That would allow me to continue operating with my current configuration and root them in their site while preventing SSH logins.
I got a trouble about communicating between host application and HID device (with a button) in a embedded Debian Linux OS. The both of them are working fine on ubuntu. When I insert my HID device on my embedded debian linux Unit, following message show up:
# usb 1-1: new low speed USB device using ehci_marvell and address 3
usb 1-1: configuration #1 chosen from 1 choice
HID device not claimed by input or hiddev
and in /dev folder some usbdev files are generated:
usbdev1.3
usbdev1.3_ep00
usbdev1.3_ep02
usbdev1.3_ep81
usbdev1.3_ep83
When I run my host app, and press the button, no any data transferring happened (check with CATc captured data). I know the host app run fine on uBuntu, because I know how to open /dev/usb/hiddev0 in my code. I don't know how to open this kind of file in debian linux. I tried use each files above, the button still doesn't work. Can anyone help me to point out if it is HID driver issue or coding issue.
Seems like this is a running issue. also, sudo returns "The value user is not in the sudoers file. This incident will be reported" kdeusu just makes a noise and returns nothing.. In the past i had a workaround of using nautilus, but, nautilus seems to be missing from jessie repo (same for gnome files).
[URL] ... ssoo... this happened and it seems to be going somewhere, but, i can't really make sense of it, and there was no solution..
Also found this [URL] .... and the pathnames should be fine but i don't want to go around arbitrarly entering commands
There was also [URL] .... which only mentions using kdesu which... doesn't really 'exist' anymore.
i would like to prevent all users other than the user "parker" on my system from using the su or sudo commands. I have not attempted to modify the sudoers file so it just contains the standard root ALL = (ALL) ALL.
View 5 Replies View RelatedI have two machines running Debian Squeeze (a laptop and a desktop). On my laptop sudo works fine, however on my desktop sudo doesn't remember my password for 1 second!!! I have created a script for the upgrade procedure with apt (to make things easier). The script is nothing more than a few commands separated by operators. It is completely useless if I have to enter my password six times while my script is running.
I tried to add timestamp_timeout=15 to the sudoers but it didn't help.
Does anyone have any idea why this could be?
my system keeps on telling me about an error:
Code: Select allsudo journalctl -p 0..3
Apr 14 10:36:11 debian ntpd_intres[682]: host name not found: ptbtime1.ptb.de
Apr 14 10:36:11 debian ntpd_intres[682]: host name not found: ptbtime2.ptb.de
Apr 14 10:36:11 debian ntpd_intres[682]: host name not found: ptbtime3.ptb.de
A quick check
Code: Select allsystemctl status ntp.service
ntp.service - LSB: Start NTP daemon
  Loaded: loaded (/etc/init.d/ntp)
 Â
[code]...
3 packets transmitted, 0 received, 100% packet loss, time 1999ms.Same result when using the standard Debian ntp time servers like "server 0.debian.pool.ntp.org iburst" in /etc/ntp.conf.
I have setup a few machines within my house. The Debian Squeeze machines do not provide a host name in the DHCP client list on my router. Strangely, my Ubuntu, Android, and Blackberry machines do show host names. I have noticed the same behavior when wirelessly tethering my Debian laptop to my Android phone (which also uses DHCP). Is there something I need to enable to have the name show up on the router?
View 14 Replies View RelatedI am experimenting with installing a bare minimum, network capable installation of Debian Squeeze. Right now, I am having trouble getting proper host name resolution. I have provided the output of ping (which is able to resolve names), wget (which is unable to resolve names), and the contents of the files I believe to be relevant to the problem. When I installed Debian, I installed *only* the SSH Server from the list of available configurations. Since then, I have installed mdns4, dnsmasq, mdns-scan, and libnss-mdns to get name resolution to work with no success so far. All packages were installed with no recommends -- aptitude -R package name. What am I missing to get host name resolution working?
[Code]...
I am trying to set up a DMZ host - that is, one multifunctional PC between the WAN and the LAN. I've started with a basic router, and expanding upon that as the need arises. I am currently trying to gain access (from the WAN) to a website hosted on one of the servers in the LAN, but I am having trouble accessing the host from the WAN; I think my iptables configuration may be too restrictive. On the DMZ host, I'm using Debian (Etch). I have setup dhcp3-server, a script to configure iptables and pound (reverse-proxy). The (virtual) machine has 4 network cards: eth0, eth1, eth2, eth3; eth0 is the WAN, eth1 through eth3 serve 3 different virtual LANs.
All machines in the LAN (except one windows 2008 server - I might want to address that problem later) get their IP adresses correctly via dhcp from the DMZ host. All machines on the LAN can access the internet (including the 2008 server if I configure it manually) as they should. If I access http://localhost on the DMZ host, pound reports "The service is not available. Please try again later." - as it should.
I can ping the DMZ host from the WAN on 10.0.0.79 However, if I try to access the DMZ host from the WAN (http://10.0.0.79) I get "Unable to connect" from firefox. I'm sure this is not a pound problem, so I think it's in the iptables, or maybe I should be installing some extra software that I'm unaware of.
[code]....
I keep getting this error on my debian server (Buffalo Linkstation so there is no GUI):
Debian Linux Version 2.6.12.6-arm1
W: Failed to fetch http://ftp.us.debian.org/debian/dists/squeeze/Release Unable to find expected entry main/binary-arm/Packages in Meta-index file (malformed Release file?)
W: Failed to fetch http://security.debian.org/dists/squeeze/updates/Release Unable to find expected entry main/binary-arm/Packages in Meta-index file (malformed Release file?)
E: Some index files failed to download, they have been ignored, or old ones used instead.Ive tried and tried changing the source.list to different repos but keep getting the same error over and over. Im really not sure what to do and I have no idea how to fix it. Its been working fine for the longest time.
source.list
#### Debian Main Repos
#deb http://http.us.debian.org/debian/ stable main contrib non-free
#deb-src http://http.us.debian.org/debian stable main contrib non-free
#deb http://security.debian.org stable/updates main contrib non-free
#deb-src http://security.debian.org stable/updates main contrib non-free
[Code]...
Having an issue with rsync
I launch the following
Code: Select allrsync -avz --remove-source-files --log-file=/home/pi/rsync.log --temp-dir
=/data/temp --partial --progress -e "ssh" 192.168.1.100://data/ext/downloads/File.ext /data/
Basically I download to main PC and rsync to my pi as the pi has a fraction of the speed for some reason when downloading form a source outside of my network.
The first few files will sync fine. Then I start getting errors like this
Code: Select allrsync: rename "/data/temp/.File.ext.y1716M" -> "File.ext": No such file or directory
(2)
The directory on the host has user and group ownership as pi. Rsync has been setup to login without a password.
Using Debian 5.0 Stable, with all current updates, if I type \192.168.0.249 I get samba access and can use all the shared files ok.if I go via the network the computer should be called \squ-eee-zeboxserver but instead comes up as \SQU-EEE-ZEBOXSERsqu-eee-zeboxserver which when clicked gives the attached error.
View 11 Replies View Relatedmy server into the public internet and must have my webserver [2.2.9 (Debian)] act secure. But this does not look very easy [I am searching, reading and working on it already the whole day ]. I read the apache docs, but there is a lot of stuff, which is different in Debian [lenny, 5.0.6]. Apache ignores the host-header given by the browser: [URL] are all served, but should be blocked. I new new to apachy, but on my IIS this works as expected. All browsers act equal [so no browser header problem].I configured two VirtualHosts, an excerpt:
NameVirtualHost hugo:80
<VirtualHost hugo:80>
DocumentRoot /usr/share/doc
[code]....
The I go to my hosts file on any box, and add hugo's ip-address under the new name x. Then, x is served, although the host-header in apache Every user coming from the internet could make the same!
I've just installed Debian Squeeze from a live CD. When I open a web browser (be it iceweasel or epiphany) and try to go to google.com, it tells me it can't resolve the host name. [Edit: They do, however, allow me to go anywhere on debian.org, minus the search feature] I also get the same error when I try to go to my website running on a local server. However, when I type the server's IP address (192.168.0.10), it goes to the website fine. Basically, any program I run that needs to resolve a host name returns an error, with the exception of the host command:
I've tried changing my DNS server IP from 192.168.0.1 (my router, configured to provide DNS) to 192.168.1.254 (my internet modem, also configured to provide DNS). That didn't help any. Then I changed my DNS server IP to the same one used by the modem, and now everything works.
I've tried googling my way out of the issue, and I've found where someone had the same issue as I've got and fixed it by adding "blacklist ipv6" to their /etc/modprobe.d/blacklist.conf file, but that didn't work for me.
So, recap: Why does resolving domain names fail for certain applications (except the "host" program) when the DNS server IP is that of my router or modem (which works fine for all of my other computers), but suddenly works when I point the computer straight to my ISP's DNS servers, and how can I permanently fix the problem?
Can I do it? I followed the installation by using apt-get install piwigo.
View 2 Replies View RelatedI am new to this debian plotform. How can I add my app to init.d linkup.
I did my programe for I2C Bit banging method and got output on Beaglebone black rev.C hardware.
I want to run my code after booting of beaglebone with out connecting to laptop or login process.
I want just powerup,then run my programe default.
/***************************Extra Information*************
#etc/inittab file
# The default runlevel.
id:2:initdefault:
# Boot-time system configuration/initialization script.
# This is run first except when booting in emergency (-b) mode.
si::sysinit:/etc/init.d/rcS
[Code] .....
I'm using Debian 5 with Exim 4 on my VPS. My purpose is to make mailboxes for each virtual host on my server. What do I have: 1. Exim is set correctly - receiving mail from [URL]... is successfull. 2. Mail for [URL]... is delivered, and the mail for [URL]... too. But [URL]... is the site written to /etc/hosts (it's localhost), and [URL]... is virtual host. But mail from both boxes writes to /var/mail/mail. Now what do I need: 1. Make mail for [URL]... store in [URL].... and mail for [URL].. store in www/Maildir. 2. Make mailboxes like [URL].... to receive mail by Thunderbird. 3. Set passwords for [URL]... and [URL]... (I don't want to enter my system user/root passwords).
View 2 Replies View RelatedI have a strange iptables issues. I have just built a new Debian install and starting adding some real basic rules (see below) the problem seems to be that the localhost itself can't get any returning traffic. That is, it seems to be allowed outgoing traffic but not the connected, returning traffic. Ordinarily allowing Established Connections would resolve this, see the rule below, but it hasn't. Why this doesn't work. Removing the last DROP in the INPUT chains obviously makes the traffic work!
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -j ACCEPT -p tcp --dport 22
iptables -A INPUT -j ACCEPT -s x.x.x.x
iptables -A INPUT -j ACCEPT -s x.x.x.x
iptables -A INPUT -j ACCEPT -s x.x.x.x -p tcp --dport 80
iptables -A INPUT -j ACCEPT -s x.x.x.x -p tcp --dport 8080
iptables -I INPUT 1 -i lo -j ACCEPT
iptables -A INPUT -j DROP
I installed debian etch, it runs and does connect to the internet fine through a linksys router...the linksys router is connected to my cable modem...now..
I just registered for a domain name (ex. mydomainname.org) with Verio....this is where I am stuck.
I installed apache 2, a web server, file server (all seem to work) I need to know what files I need to configure to have my machine actually BE that domain name.
Ex. my linksys DHCP IP addresses, the linksys gets an IP from the cable modem...my yquestion is ONCE I register a domain name with verio...how do I configure my end so it "knows" I am that respective domain name...I think I need to configure the following, but knot sure how to do it: resolv.conf, hosts, and interface?
I have just installed Debian 8 with Gnome desktop and trying to add my username to sudoers list.
When I open terminal and enter visudo I get the following error message...
Code: Select allfracmo2000@debian:~$ su
Password:
root@debian:/home/fracmo2000# visudo
bash: visudo: command not found
root@debian:/home/fracmo2000#
Although I am quite new to debian, I have done this successfully in the past so not sure why this is happening?
Can i block on debian that user can not download any files from host via winscp or other SFTP client ?
View 4 Replies View RelatedI want to use LibreOffice but I keep getting an error every time I try to open any office application.
The error is : The application cannot be started. [context="bundled"] caught unexpected exception!
I installed the .debs the first time and thought it might be wiser to install it from the experimental repos.So I reinstalled but there's no difference,I keep getting the error.
I reinstalled and found that the same error is caused by the installation for the dictionaries.I removed those but the error is still present.
I've seen people post this error on some forums except context=user and not bundle.However,it seems those were Windows 7 machines and that it's a 64 bit bug.
I'm also running the 64 bit version.
Also,if I try to install the desktop-integration .debs I get another error ( that is,if I remove the dictionaries,otherwise the installation runs just fine ) :
