Question

66

How to give nopasswd access to multiple commands via sudoers?

rated 0 times [ 66] [ 0] / answers: 1 / hits: 169627 / 2 Years ago, tue, december 7, 2021, 9:23:23

Below is what I know:

I have to add this below line in sudoers file to give rights to the user for particular task.

user_name ALL=NOPASSWD: /usr/bin/apt-get install

In this case I want to give access to this user to restart 2 services (i.e. Apache and MySQL) with all install rights.

Using the above line, I have given him all install rights, now do I have to add same line two more times to give the rights for services? Or can I just add those commands in the same line, separated by comma or something?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

steaocyte

Add To Favorites

Follow

Total Points: 345

Total Questions: 122

Total Answers: 121

Location: Spain

Member since Wed, Nov 23, 2022

1 Year ago

steaocyte questions

1 trying to overwrite foo, which is also in package bar dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)

Sat, Nov 6, 21, 01:07, 3 Years ago

1 Change shortcut to switch tab in gnome-terminal

Sat, May 13, 23, 17:14, 1 Year ago

1 Can I prevent myself from deleting a file?

Sat, Apr 16, 22, 17:22, 2 Years ago

1 Digikam: Copy and Paste images

Sun, Nov 14, 21, 12:44, 3 Years ago

1 Chrome Remote Desktop Remote Access into curently opened sesion

Tue, Mar 7, 23, 14:50, 1 Year ago

View All

answered 2 Years ago moloy · Accepted Answer

I have solved the issue by creating a new group for limited admin rights... name of that group is LimitedAdmins after that I updated the sudoers file as below.

The line I appended is:

%LimitedAdmins ALL=NOPASSWD: /usr/bin/apt-get*, /etc/init.d/apache2 restart

This is the complete /etc/sudoers file:

# This file MUST be edited with the 'visudo' command as root.    

#   

# Please consider adding local content in /etc/sudoers.d/ instead of directly modifying   his file.   

#   

# See the man page for details on how to write a sudoers file.  

# 

Defaults    env_reset



# Host alias specification



# User alias specification



# Cmnd alias specification



# User privilege specification

root    ALL=(ALL:ALL) ALL



# Members of the admin group may gain root privileges

%admin ALL=(ALL) ALL



# Allow members of group sudo to execute any command

%sudo   ALL=(ALL:ALL) ALL  



#includedir /etc/sudoers.d

%domain_nameadministrators ALL=(ALL) ALL

%LimitedAdmins ALL=NOPASSWD: /usr/bin/apt-get*, /etc/init.d/apache2 restart

It works perfectly fine in case if your system is domain or not.