Re: OT: sudo question

2020-02-15 Thread Francis . Montagnac
Hi. On Tue, 04 Feb 2020 12:25:39 -0800 Mike Wright wrote: > launching an xterm from the cli then entering in the new xterm: > lxc list > and I get a password prompt. Absolutely no clue. I think you should call: sudo lxc list or there is some magic to call sudo in your context. -- f

Re: OT: sudo question

2020-02-04 Thread stan via users
On Tue, 4 Feb 2020 14:57:31 -0800 Mike Wright wrote: > lxc-* files are from the original LXC. lxc is the base command for > LXD which is based on LXC. So, a naive guess that was wrong. :-) Thanks for the info. ___ users mailing list -- users@lists

Re: OT: sudo question

2020-02-04 Thread Mike Wright
On 2/4/20 1:10 PM, Earl Ramirez wrote: On Tue, 2020-02-04 at 12:25 -0800, Mike Wright wrote: # Cmnd alias specification Cmnd_Alias LXC=/usr/bin/lxc # Members of the admin group may gain root privileges %admin ALL=(ALL) ALL # Allow members of group sudo to execute any command %sudo ALL=(ALL:AL

Re: OT: sudo question

2020-02-04 Thread Mike Wright
On 2/4/20 1:13 PM, stan via users wrote: On Tue, 4 Feb 2020 12:25:39 -0800 Mike Wright wrote: Defaultsenv_reset Defaultsmail_badpass Defaultssecure_path="some_path" # Cmnd alias specification Cmnd_Alias LXC=/usr/bin/lxc # Members of the admin group may gain root privileges %adm

Re: OT: sudo question

2020-02-04 Thread stan via users
On Tue, 4 Feb 2020 12:25:39 -0800 Mike Wright wrote: > Defaultsenv_reset > Defaultsmail_badpass > Defaultssecure_path="some_path" > > # Cmnd alias specification > Cmnd_Alias LXC=/usr/bin/lxc > > # Members of the admin group may gain root privileges > %admin ALL=(ALL) ALL > > # All

Re: OT: sudo question

2020-02-04 Thread Earl Ramirez
On Tue, 2020-02-04 at 12:25 -0800, Mike Wright wrote: > # Cmnd alias specification > Cmnd_Alias LXC=/usr/bin/lxc > > # Members of the admin group may gain root privileges > %admin ALL=(ALL) ALL > > # Allow members of group sudo to execute any command > %sudo ALL=(ALL:ALL) ALL > > # User privile

Re: OT: sudo question

2020-02-04 Thread Mike Wright
On 2/4/20 10:01 AM, Mauricio Tavares wrote: On Tue, Feb 4, 2020 at 12:49 PM Todd Zullinger wrote: Hi, Mario Michele Macaluso wrote: Il 03/02/20 22:23, Mike Wright ha scritto: Cmnd_Alias LXC=/usr/bin/lxc rootALL=(ALL:ALL) ALL mikeALL=(ALL) NOPASSWD:LXC I'm not sure, but it could b

Re: OT: sudo question

2020-02-04 Thread Mauricio Tavares
On Tue, Feb 4, 2020 at 12:49 PM Todd Zullinger wrote: > > Hi, > > Mario Michele Macaluso wrote: > > Il 03/02/20 22:23, Mike Wright ha scritto: > >> Cmnd_Alias LXC=/usr/bin/lxc > >> > >> rootALL=(ALL:ALL) ALL > >> mikeALL=(ALL) NOPASSWD:LXC > > > > I'm not sure, but it could be (space requi

Re: OT: sudo question

2020-02-04 Thread Todd Zullinger
Hi, Mario Michele Macaluso wrote: > Il 03/02/20 22:23, Mike Wright ha scritto: >> Cmnd_Alias LXC=/usr/bin/lxc >> >> root    ALL=(ALL:ALL) ALL >> mike    ALL=(ALL) NOPASSWD:LXC > > I'm not sure, but it could be (space required) > > mikeALL=(ALL) NOPASSWD: LXC White space is optional there,

Re: OT: sudo question

2020-02-04 Thread Mario Michele Macaluso
Il 03/02/20 22:23, Mike Wright ha scritto: On 2/3/20 12:34 PM, Earl Ramirez wrote: On Sun, 2020-02-02 at 23:27 -0500, Todd Zullinger wrote: The format of that rule looks fine to me.  You might look in the logs (/var/log/secure if you've got syslog enabled, else use the journalctl command). It

Re: OT: sudo question

2020-02-03 Thread Tony Nelson
On 20-02-03 16:23:07, Mike Wright wrote: ... I am befuddled. Here is my sudoers file: Defaultsenv_reset Defaultsmail_badpass Defaultssecure_path= Cmnd_Alias LXC=/usr/bin/lxc rootALL=(ALL:ALL) ALL mikeALL=(ALL) NOPASSWD:LXC %admin ALL=(ALL) ALL %sudo ALL=(AL

Re: OT: sudo question

2020-02-03 Thread Mike Wright
On 2/3/20 12:34 PM, Earl Ramirez wrote: On Sun, 2020-02-02 at 23:27 -0500, Todd Zullinger wrote: The format of that rule looks fine to me.  You might look in the logs (/var/log/secure if you've got syslog enabled, else use the journalctl command). It may be that you're hitting another rule whic

Re: OT: sudo question

2020-02-03 Thread Earl Ramirez
On Sun, 2020-02-02 at 23:27 -0500, Todd Zullinger wrote: > The format of that rule looks fine to me. You might look in > > the logs (/var/log/secure if you've got syslog enabled, else > > use the journalctl command). > > > > It may be that you're hitting another rule which supercedes > > the

Re: OT: sudo question

2020-02-02 Thread Todd Zullinger
Hi, Mike Wright wrote: > I would like to execute a command using sudo and not have to provide a > password. After much manpage time I added this: > > mikeALL=(ALL) NOPASSWD: /usr/bin/lxc > > In theory this allows mike, from any and all hosts, to execute without > a password. > > Nonethele

OT: sudo question

2020-02-02 Thread Mike Wright
Hi Masters, I would like to execute a command using sudo and not have to provide a password. After much manpage time I added this: mikeALL=(ALL) NOPASSWD: /usr/bin/lxc In theory this allows mike, from any and all hosts, to execute without a password. Nonetheless, "mike" executing "lx

Re: somewhat OT: sudo question

2010-09-10 Thread Ranjan Maitra
On Fri, 10 Sep 2010 22:11:34 -0500 Suvayu Ali wrote: > On Friday 10 September 2010 06:14 PM, Ranjan Maitra wrote: > > No, this does not work, but this one does: > > > > maitra ALL=(ALL) PASSWD:ALL, > > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > > > > Have you tried using groups

Re: somewhat OT: sudo question

2010-09-10 Thread Suvayu Ali
On Friday 10 September 2010 06:14 PM, Ranjan Maitra wrote: > No, this does not work, but this one does: > > maitraALL=(ALL) PASSWD:ALL, > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > Have you tried using groups? maybe use the default group %wheel to grant access to all users to

Re: somewhat OT: sudo question

2010-09-10 Thread Ranjan Maitra
On Fri, 10 Sep 2010 20:53:51 -0500 JD wrote: > > On 09/10/2010 06:14 PM, Ranjan Maitra wrote: > > > > No, this does not work, but this one does: > > > > maitra ALL=(ALL) PASSWD:ALL, > > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > > > > Basically, I believe that we need the PASSW

Re: somewhat OT: sudo question

2010-09-10 Thread JD
On 09/10/2010 06:14 PM, Ranjan Maitra wrote: > > No, this does not work, but this one does: > > maitraALL=(ALL) PASSWD:ALL, > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > > Basically, I believe that we need the PASSWD to be before the NOPASSWD case, > since otherwise ALL trumps

Re: somewhat OT: sudo question

2010-09-10 Thread Ranjan Maitra
On Thu, 9 Sep 2010 23:31:49 -0500 JD wrote: > > > On 09/09/2010 09:25 PM, JD wrote: > > > > > > On 09/09/2010 09:09 PM, Gregory Hosler wrote: > >> Granting administrator privileges is not done gratuitously. Having 2 > >> entries, > >> for 2 different types of requirements is totally sane. > >>

Re: somewhat OT: sudo question

2010-09-10 Thread Tom H
On Thu, Sep 9, 2010 at 10:44 PM, JD wrote: > > On 09/09/2010 07:38 PM, Tom H wrote: >> On Thu, Sep 9, 2010 at 9:59 PM, JD  wrote: >>> I tried it and I confirm that sudo is broken if >>> the NOPASSWD: is followed by a list of commands. >>> sudo will only allow the user to sudo the specified >>> com

Re: somewhat OT: sudo question

2010-09-10 Thread Tim
On Thu, 2010-09-09 at 19:44 -0700, JD wrote: > Two entries to achieve that? > That's lame! Five emails to say that? That's ... -- [...@localhost ~]$ uname -r 2.6.30.10-105.2.23.fc11.i686.PAE Don't send private replies to my address, the mailbox is ignored. I read messages from the public li

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 09:25 PM, JD wrote: > > > On 09/09/2010 09:09 PM, Gregory Hosler wrote: >> Granting administrator privileges is not done gratuitously. Having 2 >> entries, >> for 2 different types of requirements is totally sane. >> >> Having said that, the sudoers manpage gives an example with on

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 09:09 PM, Gregory Hosler wrote: > Granting administrator privileges is not done gratuitously. Having 2 > entries, > for 2 different types of requirements is totally sane. > > Having said that, the sudoers manpage gives an example with one line > combining both. Would this do it?

Re: somewhat OT: sudo question

2010-09-09 Thread Gregory Hosler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/10/2010 10:44 AM, JD wrote: > > > On 09/09/2010 07:38 PM, Tom H wrote: >> On Thu, Sep 9, 2010 at 9:59 PM, JD wrote: >>> I tried it and I confirm that sudo is broken if >>> the NOPASSWD: is followed by a list of commands. >>> sudo will only all

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 07:38 PM, Tom H wrote: > On Thu, Sep 9, 2010 at 9:59 PM, JD wrote: >> I tried it and I confirm that sudo is broken if >> the NOPASSWD: is followed by a list of commands. >> sudo will only allow the user to sudo the specified >> commands without a password. >> All other commands are

Re: somewhat OT: sudo question

2010-09-09 Thread Tom H
On Thu, Sep 9, 2010 at 9:59 PM, JD wrote: > > I tried it and I confirm that sudo is broken if > the NOPASSWD: is followed by a list of commands. > sudo will only allow the user to sudo the specified > commands without a password. > All other commands are blocked. > > I think you should open a bug

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 06:46 PM, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 20:13:04 -0500 JD wrote: > >> >> On 09/09/2010 05:32 PM, Ranjan Maitra wrote: >>> On Thu, 9 Sep 2010 14:18:43 -0500 kalinix >>>wrote: >>> On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: On Thu, 9 Se

Re: somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
On Thu, 9 Sep 2010 20:13:04 -0500 JD wrote: > > > On 09/09/2010 05:32 PM, Ranjan Maitra wrote: > > On Thu, 9 Sep 2010 14:18:43 -0500 kalinix > > wrote: > > > >> On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: > >> > >> > >> On Thu, 9 Sep 2010 13:59:18 -0500 > >> JDmailto:jd1...@gmail

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 05:32 PM, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 14:18:43 -0500 kalinix > wrote: > >> On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: >> >> >> On Thu, 9 Sep 2010 13:59:18 -0500 >> JDmailto:jd1...@gmail.com>> wrote: >> >>> >>> On 09/09/2010 11:41 AM, Ranjan Maitra wrot

Re: somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
On Thu, 9 Sep 2010 14:18:43 -0500 kalinix wrote: > On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: > > > On Thu, 9 Sep 2010 13:59:18 -0500 JD > mailto:jd1...@gmail.com>> wrote: > > > > > > > On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > > > Hi, > > > > > > I would like to set up sudo

Re: somewhat OT: sudo question

2010-09-09 Thread Sam Sharpe
On 9 September 2010 22:18, JD wrote: > On 09/09/2010 12:12 PM, Ranjan Maitra wrote: >>> Append a line like the following to /etc/sudoers >>> >>> ranjan      ALL=(ALL)       NOPASSWD: ALL >> Sorry, maybe I was not clear. I wanted to have the ability to use sudo >> without password for the above two

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 12:12 PM, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 13:59:18 -0500 JD wrote: > >> >> On 09/09/2010 11:41 AM, Ranjan Maitra wrote: >>> Hi, >>> >>> I would like to set up sudo permissions for myself (let us say) such >>> that I do not need password for /usr/sbin/pm-hibernate >>> or /

Re: somewhat OT: sudo question

2010-09-09 Thread kalinix
On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 13:59:18 -0500 JD wrote: > > > > > > > On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > > > Hi, > > > > > > I would like to set up sudo permissions for myself (let us say) such > > > that I do not need password for /usr

Re: somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
On Thu, 9 Sep 2010 13:59:18 -0500 JD wrote: > > > On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > > Hi, > > > > I would like to set up sudo permissions for myself (let us say) such > > that I do not need password for /usr/sbin/pm-hibernate > > or /usr/sbin/pm-suspend but need it for everything e

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > Hi, > > I would like to set up sudo permissions for myself (let us say) such > that I do not need password for /usr/sbin/pm-hibernate > or /usr/sbin/pm-suspend but need it for everything else. Anyone know > off-hand how this can be done by adding lin

somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
Hi, I would like to set up sudo permissions for myself (let us say) such that I do not need password for /usr/sbin/pm-hibernate or /usr/sbin/pm-suspend but need it for everything else. Anyone know off-hand how this can be done by adding lines in the /etc/sudoers file? Many thanks and best wishes,