[CentOS] Wheel and YUM!!

Jason Pyeron jpyeron at pdinc.us
Fri Jun 27 14:17:22 UTC 2008


Just a point of note:


When adding the wheel group to the sudoers file via visudo, it does not mean
that the users in the wheel group can execute commands directly. It means that
they can type:

#sudo command options


For each enabled command in the sudoers file.


Now lets walk through some examples from my sudoers file:

jpyeron ALL=(ALL) NOPASSWD: ALL

## allows user jpyeron logged in from ALL locations to act as ALL users without
confirming jpyeron's password and execute ALL programs.

# Uncomment to allow people in group wheel to run all commands
# %wheel        ALL=(ALL)       ALL

## allows users in the wheel group logged in from ALL locations to act as ALL
users executing ALL programs.


# Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

## allows users in the wheel group logged in from ALL locations to act as ALL
without confirming his password users executing ALL programs.

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom

## allows users in the users group logged in from ALL locations to act as root
and run either "/sbin/mount /cdrom" or "/sbin/umount /cdrom" without deviation
of the command line.

# %users  localhost=/sbin/shutdown -h now

## allows users in the users group logged in from localhost (or console?) to act
as root and execute "/sbin/shutdown -h now" only.


/* I gave up on quoting html emails... */

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and
notify the sender immediately.  Any other use of the email by you
is prohibited. 

 




More information about the CentOS mailing list