Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.
Sign up to join this community
We have a typical problem in our environment. Typically we have users with non SUDOER and ROOT access who are monitoring services of our application.
At times they need to restart a service which only ROOT user can do it.
For example : The team member sees that certain service needs to be restarted after changes in the database.
From security point of view, we do not want to give them SUDO access.
What other options do we have?
You can add the service you want to be managed by regular user to sudoers file:
Adding commonads in sudoers:
https://www.atrixnet.com/allow-an-unprivileged-user-to-run-a-certain-command-with-sudo/
example command:
<your-user> ALL=(ALL) NOPASSWD: /usr/bin/systemctl start program.service
