Walter Dnes wrote:
On Tue, Aug 10, 2010 at 04:14:41AM +0200, Frank Steinmetzger wrote
Am Dienstag, 10. August 2010 schrieb Paul Hartman:
Typing that long password into sudo every time I ran a command was a
hassle
I???ve never used sudo, and never really liked the idea of it. In
fact I???m always amused and slightly annoyed by the sheer amount
of sudo one can find in your typical ubuntu howto. ;-)
There are some things that have to be done as root, but are needed by
a regular user. E.g. I have a backup dialup account with 295.ca (guess
how much they charge per month<G>). When using it, I not only have to
run "pon", but I also have to copy over the correct ssmtp.conf settings
for my dialup ISP. My ~/bin/udialup (USB dialup) script reads like so...
#!/bin/bash
/usr/bin/sudo /bin/cp -f /etc/ssmtp/295.ssmtp.conf /etc/ssmtp/ssmtp.conf
/usr/bin/sudo /usr/sbin/pon u295.ca
When I exit, I have to copy back the ssmtp.conf that points to my
broadband ISP's MTU. My ~/bin/dialdown script reads like so...
#!/bin/bash
/usr/bin/sudo /usr/sbin/poff
/usr/bin/sudo /bin/cp -f /etc/ssmtp/teksavvy.ssmtp.conf /etc/ssmtp/ssmtp.conf
This is after I figured out how to use "metric" in my network config
so that ppp0 and eth0 could co-exist side by side. ppp0 can talk to the
outside world via the dialup modem, while eth0 *SIMULTANEOUSLY* talks to
my other machines on 192.168.123.248/29 (aka 192.168.123.240 netmask
255.255.255.240). Before that, my udialup script had to tear down eth0,
and dialdown had to restart it. Here are some of the entries in
/etc/sudoers on my machine "i3"...
waltdnes i3 = (root) NOPASSWD: /bin/cp -f /etc/ssmtp/295.ssmtp.conf
/etc/ssmtp/ssmtp.conf
waltdnes i3 = (root) NOPASSWD: /usr/sbin/pon 295.ca
waltdnes i3 = (root) NOPASSWD: /usr/sbin/poff
waltdnes i3 = (root) NOPASSWD: /bin/cp -f /etc/ssmtp/teksavvy.ssmtp.conf
/etc/ssmtp/ssmtp.conf
waltdnes i3 = (root) NOPASSWD: /sbin/poweroff
waltdnes i3 = (root) NOPASSWD: /usr/bin/rdate time.nrc.ca -s
waltdnes i3 = (root) NOPASSWD: /sbin/hwclock --systohc
waltdnes i3 = (root) NOPASSWD: /usr/sbin/hibernate
This gives me the power to do specific root-level stuff as a regular
user, without giving away the keys to the kingdom. Note that none of
the entries accepts any parameters, let alone $*. Also. specifying the
path prevents running the wrong executable with root-level privileges.
I used to use wvdial as well as pon and I don't recall having to be
root. I added myself the dial-up group if I recall correctly. It just
worked for me.
I also don't use sudo here either. ;-)
Dale
:-) :-)
