sudo selectively execute file, * wildcard on dir set with "(ALL) NOPASSWD:".
Kent Ho <[email protected]> Tue, 5 Jan 2010 17:08:37 +0800
| Newsgroups | gmane.linux.application,gmane.linux.admin,gmane.linux.configuration |
|---|---|
| Message-ID | <[email protected]> |
Hi All, I'm experiencing a problem with sudo. sudo selectively execute file in a directory, * wildcard on dir set wit= h "(ALL) NOPASSWD:". I created a script called "script1.sh" in a directory.=A0=A0 When I exe= cute this script with sudo, it ask me for password which not suppose to happen.=A0= I break out with ctrl+c. I then copy script1.sh to a new file in the same directory as "script2.= sh". Now I execute "script1.sh" again with sudo, now it will execute. There is no change on script1.sh, All I done is created a new file in t= he directory.=A0 But now sudo do not ask me password any more. At this point I can execute both scripts with sudo with no password.=A0= Which is normal. Now I delete "script2.sh".=A0 Now the directory has only 1 file again "script1.sh".=A0 I execute script1.sh now it will ask me for password a= gain. All executable file should be executable regardless, I don't know why t= his is happening.=A0 Number of files in directory affects sudo? Version-Release number of selected component (if applicable): [mdrop@c-in3sf--02-04 bin]$ rpm -qa | grep sudo sudo-1.6.9p17-5.el5 How reproducible: Everytime. Steps to Reproduce: Here is the command sequence from the terminal: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D [mdrop@c-in3sf--02-04 bin]$ pwd /usr/local/site/operations/dsh/bin [mdrop@c-in3sf--02-04 bin]$ sudo -l | grep dsh =A0=A0=A0 (ALL) NOPASSWD: /usr/local/site/mailscripts/spf/bin/*, /usr/local/site/mailscripts/ws/bin/*, /usr/local/site/operations/dsh/bi= n/*, /usr/local/site/operations/bin/* [mdrop@c-in3sf--02-04 bin]$ ls -l total 0 [mdrop@c-in3sf--02-04 bin]$ echo "echo test123"> script1.sh ; chmod +x script1.sh [mdrop@c-in3sf--02-04 bin]$ ls -l total 4 -rwx------ 1 mdrop mdrop 13 Dec 30 07:04 script1.sh [mdrop@c-in3sf--02-04 bin]$ sudo /usr/local/site/operations/dsh/bin/scr= ipt1.sh=20 Password:=20 [mdrop@c-in3sf--02-04 bin]$ cp script1.sh script2.sh=20 [mdrop@c-in3sf--02-04 bin]$ ls -l total 8 -rwx------ 1 mdrop mdrop 13 Dec 30 07:04 script1.sh -rwx------ 1 mdrop mdrop 13 Dec 30 07:04 script2.sh [mdrop@c-in3sf--02-04 bin]$ sudo /usr/local/site/operations/dsh/bin/scr= ipt1.sh=20 test123 [mdrop@c-in3sf--02-04 bin]$ sudo /usr/local/site/operations/dsh/bin/scr= ipt2.sh=20 test123 [mdrop@c-in3sf--02-04 bin]$ rm script2.sh=20 [mdrop@c-in3sf--02-04 bin]$ ls -l total 4 -rwx------ 1 mdrop mdrop 13 Dec 30 07:04 script1.sh [mdrop@c-in3sf--02-04 bin]$ sudo /usr/local/site/operations/dsh/bin/scr= ipt1.sh=20 Password:=20 [mdrop@c-in3sf--02-04 bin]$=20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Actual results: $ sudo /usr/local/site/operations/dsh/bin/script1.sh=20 Password:=20 Expected results: $ sudo /usr/local/site/operations/dsh/bin/script1.sh=20 test123 What could have caused this? Any help is highly appreciated. Thanks. Garlum. =20 _________________________________________________________________ Windows Live: Friends get your Flickr, Yelp, and Digg updates when they= e-mail you. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-actio= n/social-network-basics.aspx?ocid=3DPID23461::T:WLMTAGL:ON:WL:en-xm:SI_= SB_3:092010-- To unsubscribe from this list: send the line "unsubscribe linux-apps" i= n the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html