View previous topic :: View next topic |
Author |
Message |
stikboy n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 14 Sep 2003 Posts: 68 Location: Colorado
|
Posted: Sun Oct 24, 2004 8:44 am Post subject: su -c <command> without password? |
|
|
Is it possible to disable asking for root's password for only certain things? I would like to be able to add:
su -c dvdstyler
su -c k3b
to my fluxbox menu and have them start without needing the password. I would use sudo, but growisofs does not like sudo and I don't want to disable it for everything for obvious security issues |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
DislexiK n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 09 Nov 2003 Posts: 72 Location: /home/dislexik
|
Posted: Sun Oct 24, 2004 9:16 am Post subject: |
|
|
stikboy,
You can use suauth to do kind of the thing you want to do, it allows you to limit who can SU and who they can SU to, it also allows you to let them SU with or without a password, or to SU with there password
The basics are:
create the file /etc/suauth with:
<UID To SU To>:<UID To SU From>:ACTIONS
For your example:
<root>:<username>:<NOPASS>
# man suauth
for more detils
Regards
DislexiK _________________ DislexiK DoT KoM - A Click Start To Becoming A GeeK
Linux, Networking, Hardware and Programming
Forum and Articles Dedicated to helping all types of experienced users |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
stikboy n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 14 Sep 2003 Posts: 68 Location: Colorado
|
Posted: Sun Oct 24, 2004 9:36 am Post subject: |
|
|
Thanks for the reply:) I didn't know about suauth
That will work, but it does only limit by user, and not user/app being run, which was what I'm looking for (trying to remain as secure as possible) but since it's my pc and no one else has access, I could settle for this if no one has any way to limit by commands like sudo |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
pjp Administrator
![Administrator Administrator](/images/ranks/rank-admin.gif)
![](images/avatars/1154772887439692d88303b.jpg)
Joined: 16 Apr 2002 Posts: 20589
|
Posted: Sun Oct 24, 2004 4:21 pm Post subject: |
|
|
Moved from Other Things Gentoo. _________________ Quis separabit? Quo animo? |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
outspoken Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
![](images/avatars/602230414403f3c91cd71e.gif)
Joined: 14 Feb 2004 Posts: 464 Location: orlando, fl
|
Posted: Wed Nov 17, 2004 3:35 am Post subject: |
|
|
what is the difference between sudo and suauth? ive always used sudo for such things. (like k3b since now root it required to burn)
so in my fluxbox menu i have:
Code: |
[exec] (K3B) {sudo k3b}
|
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Paulten Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/385373341414e8e67ba373.png)
Joined: 28 Mar 2003 Posts: 257 Location: Sykkylven, Norway
|
Posted: Wed Nov 17, 2004 12:03 pm Post subject: |
|
|
My way :
vi /etc/pam.d/su
add :
auth sufficient /lib/security/pam_wheel.so use_uid trust
Users in the group wheel does not need to type password when typing "su"
![Wink ;)](images/smiles/icon_wink.gif) _________________ Homepage : http://paul.kde.no Jabber ID : tenfjord@jabber.org
"Dei levde som dyr. Dei verken røykte eller drakk" -Ukjent |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
outspoken Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
![](images/avatars/602230414403f3c91cd71e.gif)
Joined: 14 Feb 2004 Posts: 464 Location: orlando, fl
|
Posted: Thu Nov 18, 2004 3:05 am Post subject: |
|
|
Paulten wrote: | My way :
vi /etc/pam.d/su
add :
auth sufficient /lib/security/pam_wheel.so use_uid trust
Users in the group wheel does not need to type password when typing "su"
![Wink ;)](images/smiles/icon_wink.gif) |
does anything need to be reset after adding this? it does not work for me. when i checked inside the /etc/pam.d/su file there was the line you mentioned commented out - so i just used that one instead.
im guessing i have to logout or possibly resource my enviornment, not sure?
ok, well i just did 'source /etc/profile' and now it works. cool stuff. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|