*ܼ [#m091eb98]

sudo /etc/sudoers ˤƹԤ
ľԽǽʸåʤɤεǽİʲޥͳԽԤȤ侩롣

visudo

sudoѤǤ桼

եmain partʲ˳ƥ桼򵭽Ҥ롣

  • wheel롼׽°桼
    ʲιԤΥȤ򳰤wheel롼פ˽°桼sudoμ¹ԤǽȤʤ롣
    %wheel        ALL=(ALL)       NOPASSWD: ALL

桼˼¹Բǽޥ¤

եmain partʲ˳ƥ桼򵭽Ҥ롣
񼰤ϰʲȤʤ롣

[USER NAME] [³]=([¹ԥ桼]) [ޥ1], [ޥ2], ...

  • guest桼³¤ʤroot¤/etc/init.d/apachectrlμ¹ԤĤϰʲꤹ롣
guest ALL=(root) /etc/init.d/apachectl

ѥɤʤޥ¹

NOPASSWDΥץꤹ뤳Ȥǡѥɤʤޥμ¹ԤǽȤʤ롣

guest ALL=(root) NOPASSWD: /etc/init.d/apachectl

顼б

sudo: sorry, you must have a tty to run sudo

tty¸ߤʤȯ륨顼
ץꥱͳsudoѤzabbix_agentdremote commmandweb-consolesudoʤɡˤȯ롣 ǥեsudoѻtty׵꤬᤹ͤƤ뤿ᡢ򥳥ȥȤ뤳ȤDzäǤ롣

ѹDefaults requiretty
ѹ# Defaults requiretty

բ
ʤɤsudoѤǤƤޤᡢƥꥹ餦Ȥ򤷤ꤹ뤳

  • ߤʤUNIXФΥƥк 5
    ӥ򥻥奢ˤ뤿¡3ˡԸ¤¤Τsusudoδܡ
    http://www.atmarkit.co.jp/fsecurity/rensai/unix_sec05/unix_sec01.html

ȥå   Խ ʬ ʎގ̎ ź ʣ ̾ѹ   ǽ   إ   ǽRSS
Last-modified: 2012-04-08 () 03:30:23 (2785d)