AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only

  • 1.  sudo NOEXEC crontab -e

    Posted Mon September 22, 2008 10:31 AM

    Originally posted by: SystemAdmin


    I’m trying to restrict the use of a few tools on AIX known by its shell escapes history.
    I started the tests with vi, crontab, less and find.
    The problem is: I cannot use the command crontab -e anymore.
    Does anyone knows how to make it work? Is any other way to accomplish that?I would like
    to allow the systems administrators to edi the sudo's crontab but I don´t wnat to give
    them a root shell via vi shell escape.

    Here is the NOEXEC declaration in the sudoers file:
    Cmnd_Alias NOEXCMD = /usr/bin/vi, /usr/bin/crontab, /usr/bin/less, /usr/bin/find

    Any help will be greatly appreciate,
    Jackson