server - Allow user in a chrooted shell to use a sudo command - Ask Ubuntu
i have user chroot
ed directory, , working smoothly. want group user in able restart single process that's being managed supervisor
, however, , can't figure out how.
i've added line /etc/sudoers
:
%mygroupname = (root) nopasswd:/usr/bin/supervisorctl restart myprocessname
i copied /usr/bin/sudo
same path in chroot
environment. copied of dependencies relevant places (found using ldd /usr/bin/sudo
).
i've gathered sudo
uses ton of additional files on system, , i've copied them chroot
environment. i'm stuck now, however, , can't past error. missing?
sudo
log (line breaks readability):
nov 10 20:29:04 sudo[3593] pam_setcred: failure setting user credentials @ sudo_pam_begin_session() /build/sudo-1bdjzq/sudo-1.8.16/plugins/sudoers/auth/pam.c:274 nov 10 20:29:04 sudo[3593] pam_open_session: module unknown @ sudo_pam_begin_session() /build/sudo-1bdjzq/sudo-1.8.16/plugins/sudoers/auth/pam.c:283
is stupid idea in first place?
rather trying copy sudo binary , dependencies chroot, might easier have script running root checks when file exists , restarts process.
that script might this:
#!/bin/bash restartfile="restartprocess" while : user in /home/* if [ -f $user/$restartfile ] supervisorctl restart myprocessname rm $user/$restartfile fi done sleep 5 #adjust file checking time interval done
(this assumes user chrooted folder in /home)
once script running root, chrooted user have run 1 of following commands create empty file (called restartprocess
) in home directory (you add ~/
before file name):
touch restartprocess
echo > restartprocess
> restartprocess
and process restarted.
Comments
Post a Comment