Sudo ...

Snyder, Alexander alex at misteralexander.com
Fri Feb 5 14:44:37 MST 2016


No, this is for a work system ... it's incredibly locked down.  You only
have free reign in your home directory.  *Everything and everywhere else* is
a sudo request.  We have a /logs directory in a home directory that points
to a "/var/log/xyz/abc.log" location, but we were unsure if we could simply
request "/home/user/logs", or if we needed a separate request for the /var
location as well.


On Fri, Feb 5, 2016 at 2:37 PM, Stephen Partington <cryptworks at gmail.com>
wrote:

> you can use the symlink, and maybe grant group access to the symlink that
> should give you access to the other location. but generally speaking normal
> users have read access to /var. so you should not need elevated credentials.
>
> On Fri, Feb 5, 2016 at 2:19 PM, Snyder, Alexander <
> alex at misteralexander.com> wrote:
>
>> Does anyone know if you grant sudo access to a symlink, does that grant
>> access to the destination?
>>
>> Like this ... inside the sudoers file, I have:
>>
>> /bin/cat * /home/user/logs
>>
>> "logs" is a symlink pointing to:  /var/log/httpd/
>>
>> will that work, or will i need to specify the direct path?
>>
>> Thanks,
>> Alex.
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>>
>
>
>
> --
> A mouse trap, placed on top of your alarm clock, will prevent you from
> rolling over and going back to sleep after you hit the snooze button.
>
> Stephen
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20160205/a0237458/attachment.html>


More information about the PLUG-discuss mailing list