Manage root privileges for users on Red Hat Azure VM2019 Community Moderator Electionyum install in user home for non-adminsWhat version of Red Hat is used for the Red Hat Certified System Administrator Exam?RED HAT LOGIN problem with rootCompiling for Red Hat 5.9RHEL 7 (CentOS 7) security / ssh / sshd_config advise requestedHow do I install some required libraries for a program without sudo?How to register a Red Hat 5.9 SystemHow to remove line wrapping from DNF & YUM commands?Red Hat disk utility only works for root, no sudoer?Giving users scheduling privilegesHow to keep password aging but disable password “inactive”?
What is the meaning of "You've never met a graph you didn't like?"
Why is "la Gestapo" feminine?
What is the tangent at a sharp point on a curve?
Relations between homogeneous polynomials
How do you say "Trust your struggle." in French?
Can you describe someone as luxurious? As in someone who likes luxurious things?
Taking the numerator and the denominator
Why is participating in the European Parliamentary elections used as a threat?
When is the exact date for EOL of Ubuntu 14.04 LTS?
Is there a distance limit for minecart tracks?
Rendered textures different to 3D View
Would this string work as string?
Unfrosted light bulb
Not hide and seek
What is the purpose of using a decision tree?
"Marked down as someone wanting to sell shares." What does that mean?
1 John in Luther’s Bibel
How can I, as DM, avoid the Conga Line of Death occurring when implementing some form of flanking rule?
Travelling in US for more than 90 days
How to split IPA spelling into syllables
How to test the sharpness of a knife?
New Order #2: Turn My Way
How to get directions in deep space?
Friend wants my recommendation but I don't want to give it to him
Manage root privileges for users on Red Hat Azure VM
2019 Community Moderator Electionyum install in user home for non-adminsWhat version of Red Hat is used for the Red Hat Certified System Administrator Exam?RED HAT LOGIN problem with rootCompiling for Red Hat 5.9RHEL 7 (CentOS 7) security / ssh / sshd_config advise requestedHow do I install some required libraries for a program without sudo?How to register a Red Hat 5.9 SystemHow to remove line wrapping from DNF & YUM commands?Red Hat disk utility only works for root, no sudoer?Giving users scheduling privilegesHow to keep password aging but disable password “inactive”?
We have set up a Red Hat VM on Azure, but we are unsure how we could deal with user privileges. We want to use the VM to test software in a Linux environment as opposed to the Windows workstations that we have.
We would like to have two user groups:
1) admin Account
2) user Accounts: They need to be able to install packages via yum, but should not be able to change system relevant information (by accident) like ssh-keys, other users' passwords etc. However, from this yum install in user home for non-admins I understood that sudo privileges are necessary to do yum installs.
How could we achieve this?
rhel privileges
edited 15 hours ago
ctrl-alt-delor
12k42461
asked 15 hours ago
eviloliveevilolive
1
add a comment |
We have set up a Red Hat VM on Azure, but we are unsure how we could deal with user privileges. We want to use the VM to test software in a Linux environment as opposed to the Windows workstations that we have.
We would like to have two user groups:
1) admin Account
2) user Accounts: They need to be able to install packages via yum, but should not be able to change system relevant information (by accident) like ssh-keys, other users' passwords etc. However, from this yum install in user home for non-admins I understood that sudo privileges are necessary to do yum installs.
How could we achieve this?
rhel privileges
edited 15 hours ago
ctrl-alt-delor
12k42461
asked 15 hours ago
eviloliveevilolive
1
add a comment |
We have set up a Red Hat VM on Azure, but we are unsure how we could deal with user privileges. We want to use the VM to test software in a Linux environment as opposed to the Windows workstations that we have.
We would like to have two user groups:
1) admin Account
2) user Accounts: They need to be able to install packages via yum, but should not be able to change system relevant information (by accident) like ssh-keys, other users' passwords etc. However, from this yum install in user home for non-admins I understood that sudo privileges are necessary to do yum installs.
How could we achieve this?
rhel privileges
edited 15 hours ago
ctrl-alt-delor
12k42461
asked 15 hours ago
eviloliveevilolive
1
We have set up a Red Hat VM on Azure, but we are unsure how we could deal with user privileges. We want to use the VM to test software in a Linux environment as opposed to the Windows workstations that we have.
We would like to have two user groups:
1) admin Account
2) user Accounts: They need to be able to install packages via yum, but should not be able to change system relevant information (by accident) like ssh-keys, other users' passwords etc. However, from this yum install in user home for non-admins I understood that sudo privileges are necessary to do yum installs.
How could we achieve this?
rhel privileges
rhel privileges
edited 15 hours ago
ctrl-alt-delor
12k42461
asked 15 hours ago
eviloliveevilolive
1
edited 15 hours ago
ctrl-alt-delor
12k42461
asked 15 hours ago
eviloliveevilolive
1
edited 15 hours ago
ctrl-alt-delor
12k42461
edited 15 hours ago
ctrl-alt-delor
12k42461
edited 15 hours ago
ctrl-alt-delor
12k42461
12k42461
asked 15 hours ago
eviloliveevilolive
1
asked 15 hours ago
eviloliveevilolive
1
asked 15 hours ago
eviloliveevilolive
1
1
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You can configure sudo in a very fine grain way:
You can tell it to allow user-a to run program-b. You can tell it if a password is needed to do this. Adding a user to group sudo, gives that user permission to do anything with sudo if they provide a password. But if you edit the /etc/sudoers then you can provide this fine grained permission.
Read:
man sudoersman visudo— for how to edit the sudo file, on a live system, without accidentally locking yourself out.
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
Thanks! I was not aware of the possibilities of sudo. So I created a new groupnewgroupand assigned my team members to it. If I put%newgroup ALL=(root) /usr/bin/yumin /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside$HOME, for which the group should not have write privileges. Is this not conflicting?
– evilolive
10 hours ago
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507159%2fmanage-root-privileges-for-users-on-red-hat-azure-vm%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You can configure sudo in a very fine grain way:
You can tell it to allow user-a to run program-b. You can tell it if a password is needed to do this. Adding a user to group sudo, gives that user permission to do anything with sudo if they provide a password. But if you edit the /etc/sudoers then you can provide this fine grained permission.
Read:
man sudoersman visudo— for how to edit the sudo file, on a live system, without accidentally locking yourself out.
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
Thanks! I was not aware of the possibilities of sudo. So I created a new groupnewgroupand assigned my team members to it. If I put%newgroup ALL=(root) /usr/bin/yumin /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside$HOME, for which the group should not have write privileges. Is this not conflicting?
– evilolive
10 hours ago
add a comment |
You can configure sudo in a very fine grain way:
You can tell it to allow user-a to run program-b. You can tell it if a password is needed to do this. Adding a user to group sudo, gives that user permission to do anything with sudo if they provide a password. But if you edit the /etc/sudoers then you can provide this fine grained permission.
Read:
man sudoersman visudo— for how to edit the sudo file, on a live system, without accidentally locking yourself out.
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
Thanks! I was not aware of the possibilities of sudo. So I created a new groupnewgroupand assigned my team members to it. If I put%newgroup ALL=(root) /usr/bin/yumin /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside$HOME, for which the group should not have write privileges. Is this not conflicting?
– evilolive
10 hours ago
add a comment |
You can configure sudo in a very fine grain way:
You can tell it to allow user-a to run program-b. You can tell it if a password is needed to do this. Adding a user to group sudo, gives that user permission to do anything with sudo if they provide a password. But if you edit the /etc/sudoers then you can provide this fine grained permission.
Read:
man sudoersman visudo— for how to edit the sudo file, on a live system, without accidentally locking yourself out.
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
You can configure sudo in a very fine grain way:
You can tell it to allow user-a to run program-b. You can tell it if a password is needed to do this. Adding a user to group sudo, gives that user permission to do anything with sudo if they provide a password. But if you edit the /etc/sudoers then you can provide this fine grained permission.
Read:
man sudoersman visudo— for how to edit the sudo file, on a live system, without accidentally locking yourself out.
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
answered 15 hours ago
ctrl-alt-delorctrl-alt-delor
12k42461
12k42461
Thanks! I was not aware of the possibilities of sudo. So I created a new groupnewgroupand assigned my team members to it. If I put%newgroup ALL=(root) /usr/bin/yumin /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside$HOME, for which the group should not have write privileges. Is this not conflicting?
– evilolive
10 hours ago
add a comment |
Thanks! I was not aware of the possibilities of sudo. So I created a new groupnewgroupand assigned my team members to it. If I put%newgroup ALL=(root) /usr/bin/yumin /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside$HOME, for which the group should not have write privileges. Is this not conflicting?
– evilolive
10 hours ago
Thanks! I was not aware of the possibilities of sudo. So I created a new group
newgroup and assigned my team members to it. If I put %newgroup ALL=(root) /usr/bin/yum in /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside $HOME, for which the group should not have write privileges. Is this not conflicting?– evilolive
10 hours ago
Thanks! I was not aware of the possibilities of sudo. So I created a new group
newgroup and assigned my team members to it. If I put %newgroup ALL=(root) /usr/bin/yum in /etc/sudoers, members will only be able to execute yum, right? But yum changes files in some other folders outside $HOME, for which the group should not have write privileges. Is this not conflicting?– evilolive
10 hours ago
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507159%2fmanage-root-privileges-for-users-on-red-hat-azure-vm%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
