Hi. I have two (2) users cat - dog user cat has access to all files in /cat, and the ability to run the apps (*.php) i want to allow user dog to be able to run as user cat, and therefore run the *.php in /cat As far as I can tell, this is a sudo/sudoers issue, where I should be able to set up a user/group to run the apps with no passwd... so... I jumped into visudo, made the change to the sudo/sudoer file (not sure what the file is actually called!). the change I made cat ALL=(ALL) NOPASSWD: /cat/*.* I then did a #su dog whoami -- dog and as user dog... sudo -u cat /cat/aa.php and got a passwd prompt for dog.... so what did I miss/screw up.... Thanks... -- users mailing list users(a)lists.fedoraproject.org To unsubscribe or change subscription options: https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org

the change I made cat ALL=(ALL) NOPASSWD: /cat/*.*

On 07/11/2016 02:15 PM, Robert Nichols wrote: > On 07/11/2016 12:13 PM, bruce wrote: > >> the change I made >> cat ALL=(ALL) NOPASSWD: /cat/*.* >> > > That is granting cat the right to run commands as cat, i.e., it's pretty > much a no-op. Try > > dog ALL=(ALL) NOPASSWD: /cat/*.* > Wouldn't it be easier to create a group that both cat and dog belong to, have the files owned by cat (and that group) and give the files execute access by everybody in the group? That gives dog access to the specific commands it needs but nothing else in cat's home folder. -- users mailing list users(a)lists.fedoraproject.org To unsubscribe or change subscription options: https://lists.fedoraproject.org/admin/lists/users@lists.fedoraproject.org Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org

I have two (2) users cat - dog user cat has access to all files in /cat, and the ability to run the apps (*.php) i want to allow user dog to be able to run as user cat, and therefore run the *.php in /cat As far as I can tell, this is a sudo/sudoers issue, where I should be able to set up a user/group to run the apps with no passwd... so... I jumped into visudo, made the change to the sudo/sudoer file (not sure what the file is actually called!). the change I made cat ALL=(ALL) NOPASSWD: /cat/*.* I then did a #su dog whoami -- dog and as user dog... sudo -u cat /cat/aa.php and got a passwd prompt for dog....