Linux Security Cookbook [Electronic resources] نسخه متنی

Recipe 5.13 Starting/Stopping Daemons via sudo

5.13.1 Problem

You want specific non-superusers to
start and stop system daemons.

5.13.2 Solution

Here we let four different users start, stop, and restart web
servers. The script for doing so is
/etc/init.d/httpd
for Red Hat, or
/etc/init.d/apache
for SuSE.
We'll reference the Red Hat script in our solution.

/etc/sudoers:
User_Alias  FOLKS=barbara, l33t, jimmy, miroslav
Cmnd_Alias  DAEMONS=/etc/init.d/httpd start,/etc/init.d/httpd stop,/etc/init.d/httpd restart
FOLKS  ALL = (ALL) DAEMONS

5.13.3 Discussion

Note our use of sudo
aliases for the
users and commands. Read the sudoers(5) manpage to learn all kinds of
fun capabilities like this.

5.13.4 See Also

sudo(8), sudoers(5).