Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Apr 2001 03:14:13 +0200
From:      Roelof Osinga <roelof@nisser.com>
To:        anderson@centtech.com
Cc:        lloyd@li5.org, "freebsd-security@freebsd.org" <freebsd-security@FreeBSD.ORG>
Subject:   Re: Add/Remove Users
Message-ID:  <3ADCEA65.53BF8E3@nisser.com>
References:  <200104171545.f3HFjKq76155@mail.wsufftrust.org.uk> <3ADC56CF.D3498E5@centtech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Eric Anderson wrote:
> 
> You should check out the man page for sudo, since you can set the
> NOPASSWD option to not ask for passwords..


To smooth things over a demo:

#nobody  ALL=(root) NOPASSWD: /usr/local/sbin/userdb, /bin/sh, \
#               /usr/local/sbin/userdbpw, /usr/local/sbin/makeuserdb

# WEBAPP may run VMAIL without password on NISSER hosts
WEBAPP          NISSER = NOPASSWD:VMAIL


The former is explicit whereas the latter depends on having the
various aliasses defined. Suffice to say that the VMAIL alias
does not include /bin/sh, that was for testing purposes only.

Roelof

PS these were some intermediairy steps for a webapp that could
change a virt.users virt.password, nobody being the user apache
runs as.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3ADCEA65.53BF8E3>