Ubuntu :: Drop Privileged Sudo Rights?
Feb 11, 2010Is there a way to drop privileged sudo rights? a schellscript or applet?
View 6 RepliesIs there a way to drop privileged sudo rights? a schellscript or applet?
View 6 RepliesI have joined the domain (server 2003) and can log in consistently now. Now I would like to give all the windows users in on specific group (domain power users) SUDO rights on the machines in question. I have found one way to add users on a pr. user basis, but adding 30 users will take some time.
View 4 Replies View RelatedI was observing the following behaviour:
py script:
os.mkdir(path) #all OK
operations_that_take_10hrs_to_complete()
os.mkdir(path) # permission denied
like I lost my sudo rights after some time ..
I have setup a VPS server, created two accounts to two domains respectively, and in one account I built a tool to manage other accounts. I have been rigorously researching and found information, however not implemented yet, about granting apache sudo rights through an interface on one account, so that it can execute scripts as root to manage installations in other accounts. what I mean this is my tool will use 'rsync' to duplicate installations from any account into any account.
My question for security, is it secure to grant apache sudo rights? I have not resolved successfully granting it permissions, and I would not want to waste my time investigating more on it if it can compromise the system in any way.
In your experience, is it feasible to build such a tool like I described? I have the tool working to copy within account and to addon domains and it works great, but I want it to manage all accounts on the server.
Is there a reason I dont have privileged access to any of my folders, in /home, or anywhere else?Running Ubuntu Karmic and Win 7, with a separate partition to share files between both OS. It was working fine, until I installed Kubuntu on a separate partition, and now Ubuntu acts funny (i can browse anywhere, but cant create new folders, download files, execute files, etc. The problem exists in any and all folders (/ and /home)I can do so if I access nautilus as root...I now reinstalled ubuntu, and still the same problem.
View 4 Replies View RelatedWhenever I try to do anything that requires administrative permissions, including Synaptic, the Update Manager, or installing something on the Software Center, the "Starting Administrative Application" task comes up on the window list, but then the window does not come up and whatever action was supposed to be taken does not happen; no error messages, nothing. Also, whenever I use su or sudo in the command prompt, nothing shows up when I type my password; then when I hit Enter, it gives me an authentication error.
EDIT: It seems that the "Add/Remove Applications" program as well as the Software center do not have this problem. Synaptic and the Updates Manager, however, still do not work.
I am trying to run su as a non privileged user to log in as root. However, this only works when I make /etc/shadow world readable. I have /lib/security/unix_chkpwd as a setuid root executable
I use the following pam-file for su:
Code:
# Begin /etc/pam.d/su
auth sufficient pam_rootok.so
auth required pam_unix.so
account required pam_unix.so
session optional pam_mail.so
[Code]...
How do you open a program, in this instance "Zenmap", from the desktop in a user account when it requires root privileges? Is there a way to be prompted for the password, the same way, for instance, you're prompted when mounting a new file system or making a change to the system? I tried entering 'sudo /usr/bin/zenmap' when creating the shortcut, however that didn't work.
View 3 Replies View RelatedI have a strange problem. I have two Linux boxes. They are connected via a LAN. From machine 1 (Fedora Core 8) I can ssh to machine 2 (Fedora Core 3)without any problems if I am logged in as root on machine 1. If I am logged in as any other non-privileged user and attempt to ssh to machine 2, I get a segmentation fault and the connection is dropped (after ssh asks for the password).
Everything was working up until last Friday (8/6/2010). I did upgrade the machine 1 from 512Kb to 2.0Gb memory then..
machine1_root#ssh anyaccount@machine2 <-This works
machine1_anyotheraccount$ssh anyaccount@machine2 <-segmentation fault
while hardening a red hat enterprise 5 installation I have done something that causes the sessions of all user accounts except root to close immediately after authentication. in the /var/log/secure log file it will show three log entries per attempt:
<date/time><hostname> login: pam_unix(login:session): session opened for user fred by LOGIN(uid=0)
<date/time><hostname> login: LOGIN ON tty1 BY fred
<date/time><hostname> login: pam_unix(login:session): session closed for user fred
Since I did a number of things and have not been able to identify what caused this.
explain the difference between these two commands. I'm currently reading about changing your mac address and both of these commands show up a lot. They sound like the same thing to me. Is one better than the other, or do you need to use both to change your mac address?
Code:
sudo ifconfig eth0 down
sudo /etc/init.d/networking stop
I have a problem when I want to use su I get this error:Code:su: pam_start: error 26I have googled it so I found this topic (http://www.linuxquestions.org/questi...r-26-a-615024/) but it didn't really help me. There was a reply on that topic and his question was what the output of this was:
Code:
ldd /usr/bin/passwd
and
[code]....
A day ago I finally got around to upgrading the PackageKit installation that had been sitting for a week and a half, so I found a new upgrade for sudo available - the one that gives the sudoreplay command, I forget which version number it is exactly. When I try to use the sudo command I get this notice in my terminal:Code:Can't open /var/db/sudo/me/1: Permission deniedI didn't get it before. What do I have to do to make it open? I'm using SELinux in enforcing mode if that helps.
View 1 Replies View RelatedI have read a lot of questions from people wanting to take Debian (or some other distribution) and make its sudo command act more like the way Ubuntu's sudo does. I want to do the exact opposite, I want to make Ubuntu's sudo command act more like the sudo command from another distribution. ie I want there to be one root password
View 8 Replies View RelatedKernel 2.6.21.5, Slackware 12.0
Code:
Code:
On the other hand
Code:
So, I do not understand why the notification "sudo: cd: command not found", considering cd is a bash built-in command.
This probably something simple but it's got me foxed. I have a desktop and a laptop both running 10.04 great no issues, I have my music and movies on the desktop and stream wirelessly to my laptop.All worked great until I started to run out of space on the base units hard drive, no problem I added a second 500gig sata drive internally and moved the music and movie folders across.Now although I have marked them as shares I access them remotely, the second drive has to be mounted and appears almost like a external drive.
View 1 Replies View RelatedWhere is the SUDO file at, and remind me how do I add myself as a SUDO'er?
View 3 Replies View RelatedIt is my understanding that they do the same: they ask for my password (if I am allowed in /etc/sudoers), and give me a login shell as root.
Is there any difference between them?
sudo su -
sudo -i
Also, what's the difference between
sudo su
sudo -s
I think that they both ask for my password, and give me a shell with my old environment variables.
I am having trouble running commands by using sudo. I configured visudo file with localuser ALL=(ALL) ALL but I can't run any command, it tells me command not found.
View 8 Replies View RelatedI cant change my user settings (password, login screen settings etc) after upgrading to 10.4 on my desktop pc. It says I don't have rights. I'm the only user, no other profiles. Otherwise seems to be working fine!
View 1 Replies View RelatedI have this group "cn=admins,ou=groups,dc=home,dc=com" And I've configured slapd in the new way so I'm not using slapd.conf (I think). First I thought about just modifying the files at /etc/ldap/cn=config/....... but that didn't work. How do I make that group into an admin-group with all the rights ?
View 3 Replies View RelatedI am only user on this ubuntu 10.10 install. I have admin rights but when I try to change some settings via Ubuntu tweak unlock or alter user and groups via advanced tab I never get the option to enter my password. I have added a new user 'tempuser' via safe mode and this user is administrator too but everything works fine from this user..
Results from $ grep admin /etc/group
lpadmin:105:heath,tempuser
admin:119:firstuser,tempuser,heath
Results from groups
admin adm dialout fax cdrom floppy tape audio dip video plugdev fuse lpadmin sambashare
I am thinking of making a fresh install if I cant sort this but would like to fix if possible.
I'm new to Ubuntu and wish to use the system in combination with Apache/mySQL/phpMyAdmin. I managed to get phpMyAdmin working for now. Also mySQL database seems to work. Only problem is Apache2. I can start the server and it is working. However in the folder /var/www/ where all site files are stored, I can not edit anything. I have been reading about sudo nautilus which did allow me to change administrator rights for the folder, but still I do not get it working to display other than the default index.html page. Is there a manual or quick solution for me so I can use apache with Ubuntu?
View 2 Replies View RelatedI've got a Dell laptop with a dual boot with Ubuntu and Windows 7, but I want windows 7 to be the default OS. I can't seem to find anything on Ubuntu with any information. I had a look at some forums and it said I need to go into admin, but I don't think I have it. Does anyone know how to get Admin rights and how to change the default OS?
View 4 Replies View RelatedI am new to fedora (been using debian based distro's for the longest time). With the new release I decided to give FC13 (The kde 64 bit spin) a try. I told it to wipe my entire hdd and encrypt the partitions. The partition manager made a few LVM partitions which I assume are encrypted.
The problem I am having is that if I attempt to use an application that would normally need root access to run, I am not prompted to enter my root password. Instead, I am required to logout and log back in as root. Is there a way to make it so that FC13 will prompt me to enter in my root password so I do not need to log in and out? Or is there something Different I should have done during the install process? Also, what is the terminal equivalent of "sudo" in fedora, or is it still sudo/KDEsudo
I also have not used SE Linux before. Do I need to manually enforce the permissions for my applications and generate my own profiles for it, or is that done automatically?
I am trying to run eclipse with administrator rights so that it can access any folder on my system.
View 9 Replies View RelatedI am semi new to linux and i was getting the hang of it until just recently. I'm trying to do some web design using php and mysql. In my reference material (the all in one desktop reference {for dummies}). At some point I needed to do something in /var/www but I ran into a permissions problem so I typed:
Code:
chgrp -v -r guy0203 /var/www
405 chgrp -v -R guy0203 /var/www
406 chown -v -R guy0203 /var/www
Afterwards in some subsequent step it suggested putting the files in /usr/src/mysql. Since I didn't have that folder I used mkdir and created it. Then I tried adding the files I needed to that folder and got denied on the grounds of not having permissions once again. So tried something like this:
Code:
451 chmod 777 /usr/
452 sudochmod 777 /usr/
453 sudo chmod 777 /usr/
It was a 755 originally but I couldn't copy those commands. It turns out as that I had two terminals open in different desktops. one of them was a root terminal. It was at this point that realized that I was in that root terminal and decided I was done 'learning' for the day. I decided to listen to some music (which is located in my windows partion) and ran into a problem. The prompt that pops up to normally asks me for my admin PW to mount the drive. Now just vibrates like an incorrect entry was received, says authentication error and says I am not authorized to mount that drive then I went back to terminal to fix it, and when I tried to elevate myself to SU:
I got this:
Code:
guy0203@guy0203-laptop:~$ sudo su
sudo: must be setuid root
guy0203@guy0203-laptop:~$
I don't know what to do now but I think I totally killed this OS. If so is there anyway to save things if I have to reinstall?
I am on Ubuntu 10.04 using Rhythmbox (0.12. as my favorite music player. Right now I'm cleaning up my music collection. Part of this job is to ID3-tag multiple files (artist, genre, etc.).
On some files this works great, ob others it doesn't and I get a gstreamer error or I cannot even change the current ID3-tags. Regarding the last problem, I assume that the problem might occur because of missing rights to edit ID3-tags.
So my question is: What permissions should I give to my music collection, so Rhythmbox is able to edit the files?
I created a custom linux distro that originated from ubuntu server and I installed time-admin and want to change the time without admin rights. Is this possible?
View 1 Replies View RelatedI am trying to set up a simple home file-server for media and backups, using an old Atom board I had lying around and 1GB memory, so I don't want a full desktop. All goes well with installing server 10.10, using LVM for my data disk. However, I wanted some GUI tools since I am not familiar with the CLI, so I installed gdm, xorg, and gnome-core as suggested in some threads and forums.So far so good, it boots into the Gnome desktop, but I can't get sudo access with anything (synaptic, gkedit, etc.) - always "incorrect password". I am fine from the console; I reset my user password, no luck; I set up another admin user, and that also works in console but not the desktop.I have no idea where to go next and can't find anything that works in the forum
View 4 Replies View Related