On 1/22/2021 10:16 AM, Dominik Vogt via FreeIPA-users wrote:
On Fri, Jan 22, 2021 at 03:33:50PM -0000, Russ Long via FreeIPA-users wrote:
> I'm trying to come up with a Sudo rule that will allow a user to
> "su" to only a single specified user. I need to give a DBA access
> to the oracle user account.
Is there a specific reason why you need "sudo su" instead of using
I agree with Dominik: "sudo su" is a pet peeve of mine. It is
unnecessary and actually less secure. Use "sudu -u youruser" instead.
setup like this:
ipa sudorule-add-runasuser --users=jsmith readfiles
Pat Larkin <Patrick.Larkin(a)Sabre.com> | TEO | Texas USA |
Principal | Linux Infrastrucuture Managment & Operations |