Re: VMCP commands for non-root userids
Note that in the sudoers file you can spec out more than just the command. You can add the initial options as well. You might want to get the end user VMCP QUERY *, but to just give him VMCP, well, you might just as well give him shutdown as well. -- Robert P. Nix | Sr It Systems Engineer | Systems Maintenance Services 507-284-0844 | nix.rob...@mayo.edu Mayo Clinic| 200 First Street SW | Rochester, MN 55905 http://www.mayoclinic.org | http://www.facebook.com/MayoClinic | http://www.youtube.com/mayoclinic | http://twitter.com/mayoclinic On 10/30/13 9:23 AM, Diep, David (OCTO-Contractor) david.d...@dc.gov wrote: Sudo! What a concept. Thanks everyone... should've tried this. David -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
# vmcp log is one of my favorites. That kills your Linux real fast. (be careful, don't try this at home :)) Mike MacIsaac mikemac at-sign us.ibm.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
You cannot issue SHUTDOWN unless your virtual machine has class A. Remember that you can only execute CP commands that are on your privilege class. I cannot run VMCP Q CHPID 5F PCHID, for example. I need this to get what is the PCHID of a given FCP channel, so I would tell which SAN Switch I was connected. I could get it using lszfcp... # vmcp log is the pull the plug, kills your Linux instantly. You don't even have time to hear it screaming, as it don't even have time to scream... Mauro http://mauro.limeiratem.com - registered Linux User: 294521 Scripture is both history, and a love letter from God. 2013/10/31 Michael MacIsaac mike...@us.ibm.com # vmcp log is one of my favorites. That kills your Linux real fast. (be careful, don't try this at home :)) Mike MacIsaac mikemac at-sign us.ibm.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
On 10/31/2013 at 12:54 PM, Mauro Souza thoriu...@gmail.com wrote: You cannot issue SHUTDOWN unless your virtual machine has class A. He was referring to the Linux shutdown command, not CP. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
Ok, got it... But if in /etc/sudoers you specify that the client can only run /sbin/vmcp QUERY, this won't be a problem... Mauro http://mauro.limeiratem.com - registered Linux User: 294521 Scripture is both history, and a love letter from God. 2013/10/31 Mark Post mp...@suse.com On 10/31/2013 at 12:54 PM, Mauro Souza thoriu...@gmail.com wrote: You cannot issue SHUTDOWN unless your virtual machine has class A. He was referring to the Linux shutdown command, not CP. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
Mark is correct; I was thinking of shutdown -h now... And I was comparing that to vmcp log. The issue was that everyone was saying just give the user sudo vmcp, without any qualification to it, and the OP was new to sudo, and so might not realize that he needed to further restrict the command to limit what the user could get away with. -- Robert P. Nix | Sr It Systems Engineer | Systems Maintenance Services 507-284-0844 | nix.rob...@mayo.edu Mayo Clinic| 200 First Street SW | Rochester, MN 55905 http://www.mayoclinic.org | http://www.facebook.com/MayoClinic | http://www.youtube.com/mayoclinic | http://twitter.com/mayoclinic On 10/31/13 12:09 PM, Mauro Souza thoriu...@gmail.com wrote: Ok, got it... But if in /etc/sudoers you specify that the client can only run /sbin/vmcp QUERY, this won't be a problem... Mauro http://mauro.limeiratem.com - registered Linux User: 294521 Scripture is both history, and a love letter from God. 2013/10/31 Mark Post mp...@suse.com On 10/31/2013 at 12:54 PM, Mauro Souza thoriu...@gmail.com wrote: You cannot issue SHUTDOWN unless your virtual machine has class A. He was referring to the Linux shutdown command, not CP. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
VMCP commands for non-root userids
Hi everyone, I have a non-root UserID that needs to be able to execute VMCP commands. I've tried a lot of things, but it has not yield much success. Any suggestions?? Thanks! David Diep Serve DC is proud to present NeighborGood, a new, free tool to help residents engage in meaningful service and connect with the causes and organizations they care about. Visit NeighborGood at http://serve.dc.gov/service/neighborgood -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
I would update the /etc/sudoers (using visudo command) so that the user could use sudo to execute the vmcp command. On Wed, Oct 30, 2013 at 9:06 AM, Diep, David (OCTO-Contractor) david.d...@dc.gov wrote: Hi everyone, I have a non-root UserID that needs to be able to execute VMCP commands. I've tried a lot of things, but it has not yield much success. Any suggestions?? Thanks! David Diep Serve DC is proud to present NeighborGood, a new, free tool to help residents engage in meaningful service and connect with the causes and organizations they care about. Visit NeighborGood at http://serve.dc.gov/service/neighborgood -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- This is clearly another case of too many mad scientists, and not enough hunchbacks. Maranatha! John McKown -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
sudo? Scott Rohling On Wed, Oct 30, 2013 at 7:06 AM, Diep, David (OCTO-Contractor) david.d...@dc.gov wrote: Hi everyone, I have a non-root UserID that needs to be able to execute VMCP commands. I've tried a lot of things, but it has not yield much success. Any suggestions?? Thanks! David Diep Serve DC is proud to present NeighborGood, a new, free tool to help residents engage in meaningful service and connect with the causes and organizations they care about. Visit NeighborGood at http://serve.dc.gov/service/neighborgood -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
You'll want to google it and get it working. It's pretty simple. That will allow a user you specified the ability to run all commands or some specific commands under their own ID with UID=0 (root) authority. And everything is logged. Look at /etc/sudoers to configure it Then the syntax for users is sudo command Jon -Original Message- From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of Scott Rohling Sent: Wednesday, October 30, 2013 9:16 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: VMCP commands for non-root userids sudo? Scott Rohling On Wed, Oct 30, 2013 at 7:06 AM, Diep, David (OCTO-Contractor) david.d...@dc.gov wrote: Hi everyone, I have a non-root UserID that needs to be able to execute VMCP commands. I've tried a lot of things, but it has not yield much success. Any suggestions?? Thanks! David Diep Serve DC is proud to present NeighborGood, a new, free tool to help residents engage in meaningful service and connect with the causes and organizations they care about. Visit NeighborGood at http://serve.dc.gov/service/neighborgood -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ The information contained in this e-mail message is intended only for the personal and confidential use of the designated recipient(s) named above. This message may be an attorney-client or work product communication which is privileged and confidential. It may also contain protected health information that is protected by federal law. If you have received this communication in error, please notify us immediately by telephone and destroy (shred) the original message and all attachments. Any review, dissemination, distribution or copying of this message by any person other than the intended recipient(s) or their authorized agents is strictly prohibited. Thank you. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
Sudo! What a concept. Thanks everyone... should've tried this. David -Original Message- From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of Veencamp, Jonathon D. Sent: Wednesday, October 30, 2013 10:21 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: VMCP commands for non-root userids You'll want to google it and get it working. It's pretty simple. That will allow a user you specified the ability to run all commands or some specific commands under their own ID with UID=0 (root) authority. And everything is logged. Look at /etc/sudoers to configure it Then the syntax for users is sudo command Jon -Original Message- From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of Scott Rohling Sent: Wednesday, October 30, 2013 9:16 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: VMCP commands for non-root userids sudo? Scott Rohling On Wed, Oct 30, 2013 at 7:06 AM, Diep, David (OCTO-Contractor) david.d...@dc.gov wrote: Hi everyone, I have a non-root UserID that needs to be able to execute VMCP commands. I've tried a lot of things, but it has not yield much success. Any suggestions?? Thanks! David Diep Serve DC is proud to present NeighborGood, a new, free tool to help residents engage in meaningful service and connect with the causes and organizations they care about. Visit NeighborGood at http://serve.dc.gov/service/neighborgood -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ The information contained in this e-mail message is intended only for the personal and confidential use of the designated recipient(s) named above. This message may be an attorney-client or work product communication which is privileged and confidential. It may also contain protected health information that is protected by federal law. If you have received this communication in error, please notify us immediately by telephone and destroy (shred) the original message and all attachments. Any review, dissemination, distribution or copying of this message by any person other than the intended recipient(s) or their authorized agents is strictly prohibited. Thank you. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: VMCP commands for non-root userids
Use sudo. I have a non-root UserID that needs to be able to execute VMCP commands. I've tried a lot of things, but it has not yield much success. Any suggestions?? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
