System user without login and password but only allow sudo for one user
I'm currently trying to set up a system user on my Ubuntu 18.04.1 LTS server to run a specific service from its home directory and be used with sudo -u USER to execute a command sometimes.
I've created the user with this command:
sudo useradd -d /opt/USER -m -r -s /usr/sbin/nologin USER
And passwd -S USER shows this:
USER L 12/30/2018 -1 -1 -1 -1
First of all, I don't understand why the password is L (locked) instead of not set at all (NP). Not that it matters, I think, since I don't want to login as that user anyway.
Now, I want to be able to run a command as that user, but only me.
I can use sudo -u USER echo Test without issues, but anyone can run that command. Restricting access to sudo to only my account is currently not possible.
How can I restrict sudo to only myself with that user?
command-line permissions login sudo password
asked Dec 30 '18 at 12:29
Foxmulder2
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I'm currently trying to set up a system user on my Ubuntu 18.04.1 LTS server to run a specific service from its home directory and be used with sudo -u USER to execute a command sometimes.
I've created the user with this command:
sudo useradd -d /opt/USER -m -r -s /usr/sbin/nologin USER
And passwd -S USER shows this:
USER L 12/30/2018 -1 -1 -1 -1
First of all, I don't understand why the password is L (locked) instead of not set at all (NP). Not that it matters, I think, since I don't want to login as that user anyway.
Now, I want to be able to run a command as that user, but only me.
I can use sudo -u USER echo Test without issues, but anyone can run that command. Restricting access to sudo to only my account is currently not possible.
How can I restrict sudo to only myself with that user?
command-line permissions login sudo password
asked Dec 30 '18 at 12:29
Foxmulder2
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Try adding that user to the sudoers group so only both of you can sudo!
– George Udosen
Dec 30 '18 at 12:37
And I don't think everyone can dosudo -u!
– George Udosen
Dec 30 '18 at 12:50
add a comment |
I'm currently trying to set up a system user on my Ubuntu 18.04.1 LTS server to run a specific service from its home directory and be used with sudo -u USER to execute a command sometimes.
I've created the user with this command:
sudo useradd -d /opt/USER -m -r -s /usr/sbin/nologin USER
And passwd -S USER shows this:
USER L 12/30/2018 -1 -1 -1 -1
First of all, I don't understand why the password is L (locked) instead of not set at all (NP). Not that it matters, I think, since I don't want to login as that user anyway.
Now, I want to be able to run a command as that user, but only me.
I can use sudo -u USER echo Test without issues, but anyone can run that command. Restricting access to sudo to only my account is currently not possible.
How can I restrict sudo to only myself with that user?
command-line permissions login sudo password
asked Dec 30 '18 at 12:29
Foxmulder2
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I'm currently trying to set up a system user on my Ubuntu 18.04.1 LTS server to run a specific service from its home directory and be used with sudo -u USER to execute a command sometimes.
I've created the user with this command:
sudo useradd -d /opt/USER -m -r -s /usr/sbin/nologin USER
And passwd -S USER shows this:
USER L 12/30/2018 -1 -1 -1 -1
First of all, I don't understand why the password is L (locked) instead of not set at all (NP). Not that it matters, I think, since I don't want to login as that user anyway.
Now, I want to be able to run a command as that user, but only me.
I can use sudo -u USER echo Test without issues, but anyone can run that command. Restricting access to sudo to only my account is currently not possible.
How can I restrict sudo to only myself with that user?
command-line permissions login sudo password
command-line permissions login sudo password
asked Dec 30 '18 at 12:29
Foxmulder2
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Dec 30 '18 at 12:29
Foxmulder2
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Dec 30 '18 at 12:29
Foxmulder2
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Dec 30 '18 at 12:29
Foxmulder2
1
asked Dec 30 '18 at 12:29
Foxmulder2
1
1
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Foxmulder2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Try adding that user to the sudoers group so only both of you can sudo!
– George Udosen
Dec 30 '18 at 12:37
And I don't think everyone can dosudo -u!
– George Udosen
Dec 30 '18 at 12:50
add a comment |
Try adding that user to the sudoers group so only both of you can sudo!
– George Udosen
Dec 30 '18 at 12:37
And I don't think everyone can dosudo -u!
– George Udosen
Dec 30 '18 at 12:50
Try adding that user to the sudoers group so only both of you can sudo!
– George Udosen
Dec 30 '18 at 12:37
Try adding that user to the sudoers group so only both of you can sudo!
– George Udosen
Dec 30 '18 at 12:37
And I don't think everyone can do
sudo -u!– George Udosen
Dec 30 '18 at 12:50
And I don't think everyone can do
sudo -u!– George Udosen
Dec 30 '18 at 12:50
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Foxmulder2 is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1105587%2fsystem-user-without-login-and-password-but-only-allow-sudo-for-one-user%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Foxmulder2 is a new contributor. Be nice, and check out our Code of Conduct.
Foxmulder2 is a new contributor. Be nice, and check out our Code of Conduct.
Foxmulder2 is a new contributor. Be nice, and check out our Code of Conduct.
Foxmulder2 is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1105587%2fsystem-user-without-login-and-password-but-only-allow-sudo-for-one-user%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Try adding that user to the sudoers group so only both of you can sudo!
– George Udosen
Dec 30 '18 at 12:37
And I don't think everyone can do
sudo -u!– George Udosen
Dec 30 '18 at 12:50