system-config-display in RHEL5 for non root users

Teeeravis · 11-24-2008, 04:07 PM

Hello all,

I would like to know if it is possible to allow non-root users to run systems-config-display without giving them the root password and without giving them access to any other sensitive systems.

Essentially can this app be configured to run w/o root privileges and can this be done without allowing access to other root apps.

Thanks

djsoundfx · 11-24-2008, 05:13 PM

You want to explore the possibility of allowing restricted sudo access ( /etc/sudoers ) something like the following:

Code:

# User Alias
User_Alias 	DISPLAYADM = user1, user2, user3
# Command Alias 
Cmnd_Alias 	DISPLAY = /usr/bin/system-config-display

# User privilege specification
DISPLAYADM     ALL=NOPASSWD: DISPLAY

This allows all users in the DISPLAYADM field to access system-config-display without entering a password, if you want them to enter their password, just remove the NOPASSWD: doing this will force them to enter THEIR password.

Also the /usr/bin/system-config-display is where the binary is homed on my RHEL 5.2 system it may be different for you.
This solution allows you to give them access to a binary that they need while protecting your root password and it limits their sudo (basically root) power.

Teeeravis · 11-25-2008, 12:21 AM

Thanks dj

It looks like this may work for our needs.