Andrew, As Mike mentioned out, making a entry in /etc/sudoers is always a best practice. #usera may run any command in /sbin without giving the path at command line. usera ALL = /sbin If all the users want the same to done for everyone. Instead making entry of everyone. Create a group, make the users a member of that group. then make a entry in /etc/sudoers as below. #All members of the groupa can run any command in /sbin groupa ALL = /sbin Hope this solution satisfies.. Wayne-Could you be clear on pathmunge function..wht/how can be done.. -Ramachandra. -----Original Message----- From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Mike Burger Sent: Thursday, April 13, 2006 7:51 AM To: General Red Hat Linux discussion list Subject: Re: sudo Configuration Or...using "sudo -l", one can get a full list of the commands to which they have sudo access, including the full paths to those commands, if the sysadmin has put the full path into the sudoers file...which is a better practice. This way, in order to get around the whole "missing this directory from my search path" thing, all one needs to do is issue "sudo /full/path/to/command" to run the command. This also gives the added benefit of not having a user be able to create a script with the same name, in some other place, and then use sudo to run that, potentially compromising your system. On Wed, April 12, 2006 5:21 pm, Wayne Pinette wrote: > You could do what I do (cause this drives me nuts) and edit profile > (in the etc directory) to just allow everyone to use the sbin > directories (just get rid of the if statement around that pathmunge > call). > > > Wayner > > >>>> AMeadows@xxxxxxx 04/12/06 1:45 pm >>> > I am attempting to configure sudo on a RH AS v3 r4 server. The version > of sudo installed is 1.6.7p5. I would like to pass the $PATH > environment of root to the sudoer when they run a sudo command. If > User A runs sudo ifconfig, usera receives an error saying that > ifconfig cannot be found. > I know that this is due to the fact that the /sbin path is not in the > user A's profile. Is it possible to pass the .profile info from root > to user A so this command can run successfully? > > > > Thanks in Advance, > > > > Andrew > -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
