1

We have a typical problem in our environment. Typically we have users with non SUDOER and ROOT access who are monitoring services of our application.

At times they need to restart a service which only ROOT user can do it.

For example : The team member sees that certain service needs to be restarted after changes in the database.

From security point of view, we do not want to give them SUDO access.

What other options do we have?

1

You can add the service you want to be managed by regular user to sudoers file:

Adding commonads in sudoers:

https://www.atrixnet.com/allow-an-unprivileged-user-to-run-a-certain-command-with-sudo/

example command:

<your-user> ALL=(ALL) NOPASSWD: /usr/bin/systemctl start program.service

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.