From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Rd1Qw-0007Ry-Oi for garchives@archives.gentoo.org; Tue, 20 Dec 2011 15:16:51 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7F23021C1E6; Tue, 20 Dec 2011 15:16:32 +0000 (UTC) Received: from mail-ey0-f181.google.com (mail-ey0-f181.google.com [209.85.215.181]) by pigeon.gentoo.org (Postfix) with ESMTP id E4E4E21C19A for ; Tue, 20 Dec 2011 15:13:29 +0000 (UTC) Received: by eaai1 with SMTP id i1so655906eaa.40 for ; Tue, 20 Dec 2011 07:13:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=9AtAvyKCfcPRTz9oy3oAuIHfpP0l0N5/Jeb4CF6ukwc=; b=nVdiD4zZjPG4iFsWI370p/m46a84jly+Ye1L7YSFFA+oytCFLvVW5POp6qaY/UM/q+ h3BSjGmo0k8HjPcOkKIynHApxQzFhA+7c8PuaL7LV7kBrqsF+ZTyYOfPNynxhDwywI/d FRlBA7A21inJHEu8EfZnWykqCDa/tSM4b6ec8= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.204.153.12 with SMTP id i12mr678685bkw.134.1324394009018; Tue, 20 Dec 2011 07:13:29 -0800 (PST) Received: by 10.204.226.72 with HTTP; Tue, 20 Dec 2011 07:13:28 -0800 (PST) In-Reply-To: <4EF0A415.8020007@libertytrek.org> References: <4EF0A415.8020007@libertytrek.org> Date: Tue, 20 Dec 2011 10:13:28 -0500 Message-ID: Subject: Re: [gentoo-user] Allow non root users to edit files owned by root? From: Michael Mol To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: b21f0275-6f2f-4ec3-b606-b3ccfc1511a8 X-Archives-Hash: 09ed0a01ef022ba16c76ab66f7c2921a On Tue, Dec 20, 2011 at 10:04 AM, Tanstaafl wro= te: > Hi all, > > I'm guessing this is a sudo question, but I'm unfamiliar with the nuances= of > sudo (never had to use it before). > > I have a new hosted VM server that I want to allow a user to be able to e= dit > files owned by root, but without giving them the root password. > > I already did: > > /usr/sbin/visudo > > and added the following line: > > %sudoroot =C2=A0 =C2=A0 =C2=A0 ALL=3D(ALL) ALL > > and made sure the user is in this group, but they still get an access den= ied > error when trying to mv or cp files that are owned bu root. > > What is the best way to do this? I'd really prefer to not give them the r= oot > password so they can su -... The sudo command allows commands to be executed *as though they were root*. 'sudo su -' would work. So would 'sudo mv src dst'. So, incidentally, would 'sudo passwd root'... --=20 :wq