Power

 View Only
  • 1.  Need to add a new user to run Sudo su -

    Posted Wed June 21, 2023 11:28 AM

    Hi,

    I am new to AIX and sudo. We have a new user who will be installing patches. She must use sudo su - to gain authority to install patches but she does not have proper access. Not sure where to add that access.

    This is the error
    'sorry, msslp is not allowed toe excute '/usr/bin/ksh' as root on sklmxxxx

    How do we elevate priv for her id so she can access sudo su -

    Thanks

    Tony



    ------------------------------
    Tony Senatore
    ------------------------------


  • 2.  RE: Need to add a new user to run Sudo su -

    Posted Wed June 21, 2023 12:31 PM
    See if there is a directory /etc/sudoers.d

    If not, look for a file /etc/sudoers

    Best practice says you should grant access based on group membership, vs managing individual IDs
    The whole sudo config is a bit much for a post here... and not something I can type on my cell phone.
    In short group permissions start with %


    Have her run sudo -l
    This will list any commands she is already defined as allowed to use
    Sudo is very specific in what it will permit you to do,
    Sudo su -  
    And
    Sudo su - root

    While aix treats them the same, sudo does not, so make sure she's keying in exactly what she's permitted to do