sudoers

[Nick Lindsell]

Hi List,
I'm trying to set up a user account that can reboot the machine
without entering a passwd. (It's for a kiosk - no network connection and
no data so security isn't a high priority).
Sudoers is what is usually used in this situation but I cannot get it
to work on the kiosk machine - but no problem on my laptop. Both are RH8.0
although the laptop is an upgrade from 7.3 and the kiosk is a fresh install.

This is the /etc/sudoers from the kiosk:-
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#
# Host alias specification
# User alias specification
# Cmnd alias specification
# Defaults specification
# User privilege specification
root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
%wheel ALL=(ALL) ALL
# Same thing without a password
#%wheel ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
#%users ALL=/sbin/shutdown -h now,/sbin/reboot
secrets ALL=(ALL) NOPASSWD:ALL


I want the user "secrets" to be able to issue shutdown or reboot.
(also put secrets into the wheel group and all variations of entries
for "secrets" in sudoers - no change)

This is /etc/sudoers from the laptop:-
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#
# Host alias specification
# User alias specification
# Cmnd alias specification
# Defaults specification
# User privilege specification
root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
nick ALL=/sbin/shutdown -h now, ALL=/sbin/reboot

I (nick) can reboot or shutdown from my normal user account without using root passwd.




Anyone have a clue? I'm spending too much time on this and would
be grateful for a pointer to the obvious that I've missed.


tia
nick@nexnix



--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list