1

As root, created a new non-root user on RHEL 7.5

appuser:x:1903:1903:appuser:/home/appuser:/bin/bash

A non-root user to be able to sudo to appuser,

sudo -u appuser

without a password,

What are the changes required on RHEL 7.5?

  • That sudo su - appuser is a horrendous security breach: you're giving full root access to the user who has permission to do that. Instead, just give the account permission to get to appuser, so they would sudo -su appuser (here, -su is two flags, -s -u). No need for the su command anywhere. – roaima Oct 29 '18 at 15:01
  • @roaima Query edited. sudo -u syslog does not work. It asks for the password for current user – overexchange Oct 29 '18 at 15:05
  • Of course it does. That's what sudo does. – roaima Oct 29 '18 at 15:28
3

You can edit the "User privilege specification" section of /etc/sudoers, adding:

non-root-user ALL = (appuser) NOPASSWD: ALL

This will allow non-root-user to run all commands as appuser. non-root-user will not be allowed to run commands as root.

Note that errors in /etc/sudoers can make a system unusable. The file should only be edited with:

$ sudo visudo

This special editor checks the sudoers file for errors before saving and refuses to save it if errors are found.

  • But -r--r----- 1 root root 1225 Jun 12 12:04 /etc/sudoers. Do you think this is customised permision? – overexchange Oct 29 '18 at 15:50
  • E45 error on modifying the file with vi editor – overexchange Oct 29 '18 at 16:30
  • It looks like -r--r----- is the standard file mode for /etc/sudoers. Refer to my edited answer for how to edit it. – fra-san Oct 29 '18 at 17:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.