AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  regarding sudo user permission

    Posted Wed February 05, 2025 03:53 AM

    I am writing to bring to your attention an issue regarding the configuration of sudo permissions for the users in the fnsrr group. Currently, the users in the fnsrr group have been granted sudo access to perform the chown command on files and directories. However, they are able to use the chown command on files and directories that belong to other groups, including root-owned files, which should not be allowed.

    The requirement is as follows:

    Grant chown permissions: The users in the fnsrr group should be allowed to execute the chown command only on files or directories that belong to the fnsrr group.
    Restrict access: They should not be allowed to change the ownership of files and directories that belong to other groups or to root.
    I have attempted to configure the sudoers file to meet these needs, but the current setup still allows broader permissions than intended. I would appreciate assistance in configuring the sudoers file correctly to:

    Allow users in the fnsrr group to perform chown only on files related to the fnsrr group.
    Ensure that they are restricted from modifying files owned by other groups or root.
    Please let me know the steps or assistance you can provide to resolve this issue effectively.

    Thank you for your attention to this matter.



    ------------------------------
    Vivek M
    ------------------------------


  • 2.  RE: regarding sudo user permission

    Posted Wed February 05, 2025 08:48 AM

    sounds like you are assuming that this wondrous "fnsrr group" is some universal knowledge somehow...so what is this "fnsrr group" you are writing about?



    ------------------------------
    I regret starting this entire conversation
    ------------------------------