比较来自世界各地的卖家的域名和 IT 服务价格

如何创建造船厂 freeIPA 对于嵌入式 sudoedit

目前,当我想提供一些用户组访问来编辑文件时,我采取如下:


ipa sudocmd-add --desc=Vi IMproved default-mode, no-exec, no-suspend mode' '/usr/bin/rvim'
ipa sudocmdgroup-add edition --desc='commands for restricted edition'
ipa sudocmdgroup-add-member edition --sudocmds=/usr/bin/rvim
ipa sudorule-add edition-4-operators --desc='Operator access to restricted edition commands'
ipa sudorule-add-allow-command edition-4-operators --sudocmdgroups=edition

然后剩余的参数与之相关联 HBAC, SELinux 等等。

我想更换

/usr/bin/rvim

嵌入式

sudoedit(8)

在我的所有造船厂
http://freeipa.org
服务器。

我需要宣布

sudoedit

作为

sudocmd

仍然? 我可以直接添加

sudoedit



sudocmdgroup

没有宣布它

sudocmd

之前?
已邀请:

冰洋

赞同来自:

这是怎么做的 (实际上,一个实际的例子):


# ipa sudocmd-add --desc='sudoedit configuration file of IPv4 packet filtering and NAT' 'sudoedit /etc/sysconfig/iptables'
--------------------------------------------------------------
Added Sudo Command "sudoedit /etc/sysconfig/iptables"
--------------------------------------------------------------
Sudo Command: sudoedit /etc/sysconfig/iptables
Description: sudoedit configuration file of IPv4 packet filtering and NAT

# ipa sudocmdgroup-add-member networking --sudocmds='sudoedit /etc/sysconfig/iptables'
Sudo Command Group: networking
Description: commands for network configuration and troubleshooting
Member Sudo commands: sudoedit /etc/sysconfig/iptables
-------------------------
Number of members added 1
-------------------------

是 sudoedit a sudo builtin

# ls -lrt /usr/bin/sudoedit
lrwxrwxrwx. 1 root root 4 Apr 8 09:00 /usr/bin/sudoedit -> sudo*

我正试图添加造船厂

/usr/bin/sudoedit

将失败此错误:

$ sudo -e /etc/sysconfig/iptables
Sorry, user joe is not allowed to execute 'sudoedit /etc/sysconfig/iptables' as root on host.domain.com.

它适用于两者

sudo -e



sudoedit

.

要回复问题请先登录注册