Re: somewhat OT: sudo question

2010-09-10 Thread Ranjan Maitra
On Fri, 10 Sep 2010 22:11:34 -0500 Suvayu Ali wrote: > On Friday 10 September 2010 06:14 PM, Ranjan Maitra wrote: > > No, this does not work, but this one does: > > > > maitra ALL=(ALL) PASSWD:ALL, > > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > > > > Have you tried using groups

Re: somewhat OT: sudo question

2010-09-10 Thread Suvayu Ali
On Friday 10 September 2010 06:14 PM, Ranjan Maitra wrote: > No, this does not work, but this one does: > > maitraALL=(ALL) PASSWD:ALL, > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > Have you tried using groups? maybe use the default group %wheel to grant access to all users to

Re: somewhat OT: sudo question

2010-09-10 Thread Ranjan Maitra
On Fri, 10 Sep 2010 20:53:51 -0500 JD wrote: > > On 09/10/2010 06:14 PM, Ranjan Maitra wrote: > > > > No, this does not work, but this one does: > > > > maitra ALL=(ALL) PASSWD:ALL, > > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > > > > Basically, I believe that we need the PASSW

Re: somewhat OT: sudo question

2010-09-10 Thread JD
On 09/10/2010 06:14 PM, Ranjan Maitra wrote: > > No, this does not work, but this one does: > > maitraALL=(ALL) PASSWD:ALL, > NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend > > Basically, I believe that we need the PASSWD to be before the NOPASSWD case, > since otherwise ALL trumps

Re: somewhat OT: sudo question

2010-09-10 Thread Ranjan Maitra
On Thu, 9 Sep 2010 23:31:49 -0500 JD wrote: > > > On 09/09/2010 09:25 PM, JD wrote: > > > > > > On 09/09/2010 09:09 PM, Gregory Hosler wrote: > >> Granting administrator privileges is not done gratuitously. Having 2 > >> entries, > >> for 2 different types of requirements is totally sane. > >>

Re: somewhat OT: sudo question

2010-09-10 Thread Tom H
On Thu, Sep 9, 2010 at 10:44 PM, JD wrote: > > On 09/09/2010 07:38 PM, Tom H wrote: >> On Thu, Sep 9, 2010 at 9:59 PM, JD  wrote: >>> I tried it and I confirm that sudo is broken if >>> the NOPASSWD: is followed by a list of commands. >>> sudo will only allow the user to sudo the specified >>> com

Re: somewhat OT: sudo question

2010-09-10 Thread Tim
On Thu, 2010-09-09 at 19:44 -0700, JD wrote: > Two entries to achieve that? > That's lame! Five emails to say that? That's ... -- [...@localhost ~]$ uname -r 2.6.30.10-105.2.23.fc11.i686.PAE Don't send private replies to my address, the mailbox is ignored. I read messages from the public li

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 09:25 PM, JD wrote: > > > On 09/09/2010 09:09 PM, Gregory Hosler wrote: >> Granting administrator privileges is not done gratuitously. Having 2 >> entries, >> for 2 different types of requirements is totally sane. >> >> Having said that, the sudoers manpage gives an example with on

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 09:09 PM, Gregory Hosler wrote: > Granting administrator privileges is not done gratuitously. Having 2 > entries, > for 2 different types of requirements is totally sane. > > Having said that, the sudoers manpage gives an example with one line > combining both. Would this do it?

Re: somewhat OT: sudo question

2010-09-09 Thread Gregory Hosler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/10/2010 10:44 AM, JD wrote: > > > On 09/09/2010 07:38 PM, Tom H wrote: >> On Thu, Sep 9, 2010 at 9:59 PM, JD wrote: >>> I tried it and I confirm that sudo is broken if >>> the NOPASSWD: is followed by a list of commands. >>> sudo will only all

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 07:38 PM, Tom H wrote: > On Thu, Sep 9, 2010 at 9:59 PM, JD wrote: >> I tried it and I confirm that sudo is broken if >> the NOPASSWD: is followed by a list of commands. >> sudo will only allow the user to sudo the specified >> commands without a password. >> All other commands are

Re: somewhat OT: sudo question

2010-09-09 Thread Tom H
On Thu, Sep 9, 2010 at 9:59 PM, JD wrote: > > I tried it and I confirm that sudo is broken if > the NOPASSWD: is followed by a list of commands. > sudo will only allow the user to sudo the specified > commands without a password. > All other commands are blocked. > > I think you should open a bug

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 06:46 PM, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 20:13:04 -0500 JD wrote: > >> >> On 09/09/2010 05:32 PM, Ranjan Maitra wrote: >>> On Thu, 9 Sep 2010 14:18:43 -0500 kalinix >>>wrote: >>> On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: On Thu, 9 Se

Re: somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
On Thu, 9 Sep 2010 20:13:04 -0500 JD wrote: > > > On 09/09/2010 05:32 PM, Ranjan Maitra wrote: > > On Thu, 9 Sep 2010 14:18:43 -0500 kalinix > > wrote: > > > >> On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: > >> > >> > >> On Thu, 9 Sep 2010 13:59:18 -0500 > >> JDmailto:jd1...@gmail

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 05:32 PM, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 14:18:43 -0500 kalinix > wrote: > >> On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: >> >> >> On Thu, 9 Sep 2010 13:59:18 -0500 >> JDmailto:jd1...@gmail.com>> wrote: >> >>> >>> On 09/09/2010 11:41 AM, Ranjan Maitra wrot

Re: somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
On Thu, 9 Sep 2010 14:18:43 -0500 kalinix wrote: > On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: > > > On Thu, 9 Sep 2010 13:59:18 -0500 JD > mailto:jd1...@gmail.com>> wrote: > > > > > > > On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > > > Hi, > > > > > > I would like to set up sudo

Re: somewhat OT: sudo question

2010-09-09 Thread Sam Sharpe
On 9 September 2010 22:18, JD wrote: > On 09/09/2010 12:12 PM, Ranjan Maitra wrote: >>> Append a line like the following to /etc/sudoers >>> >>> ranjan      ALL=(ALL)       NOPASSWD: ALL >> Sorry, maybe I was not clear. I wanted to have the ability to use sudo >> without password for the above two

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 12:12 PM, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 13:59:18 -0500 JD wrote: > >> >> On 09/09/2010 11:41 AM, Ranjan Maitra wrote: >>> Hi, >>> >>> I would like to set up sudo permissions for myself (let us say) such >>> that I do not need password for /usr/sbin/pm-hibernate >>> or /

Re: somewhat OT: sudo question

2010-09-09 Thread kalinix
On Thu, 2010-09-09 at 14:12 -0500, Ranjan Maitra wrote: > On Thu, 9 Sep 2010 13:59:18 -0500 JD wrote: > > > > > > > On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > > > Hi, > > > > > > I would like to set up sudo permissions for myself (let us say) such > > > that I do not need password for /usr

Re: somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
On Thu, 9 Sep 2010 13:59:18 -0500 JD wrote: > > > On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > > Hi, > > > > I would like to set up sudo permissions for myself (let us say) such > > that I do not need password for /usr/sbin/pm-hibernate > > or /usr/sbin/pm-suspend but need it for everything e

Re: somewhat OT: sudo question

2010-09-09 Thread JD
On 09/09/2010 11:41 AM, Ranjan Maitra wrote: > Hi, > > I would like to set up sudo permissions for myself (let us say) such > that I do not need password for /usr/sbin/pm-hibernate > or /usr/sbin/pm-suspend but need it for everything else. Anyone know > off-hand how this can be done by adding lin

somewhat OT: sudo question

2010-09-09 Thread Ranjan Maitra
Hi, I would like to set up sudo permissions for myself (let us say) such that I do not need password for /usr/sbin/pm-hibernate or /usr/sbin/pm-suspend but need it for everything else. Anyone know off-hand how this can be done by adding lines in the /etc/sudoers file? Many thanks and best wishes,