[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [hobbit] client file check

Check that.... I was getting an error message in the client logs about
requiring a tty.  Changed that in the sudo config so that is no longer a
problem.  Still getting permission denied though.  

Thanks,
 
Scot Kreienkamp
La-Z-Boy Inc.
skreien (at) la-z-boy.com
734-242-1444 ext 6379

-----Original Message-----
From: Scot Kreienkamp [mailto:SKreien (at) la-z-boy.com] 
Sent: Tuesday, July 07, 2009 10:19 AM
To: hobbit (at) hswn.dk
Subject: RE: [hobbit] client file check

That doesn't work.  It doesn't like the backticks in client-local.cfg.
Now my clients say no files checked.

Thanks,
 
Scot Kreienkamp
La-Z-Boy Inc.
skreien (at) la-z-boy.com
734-242-1444 ext 6379

-----Original Message-----
From: Brand, Thomas R. [mailto:TRBrand (at) cvs.com] 
Sent: Monday, July 06, 2009 4:31 PM
To: hobbit (at) hswn.dk
Subject: RE: [hobbit] client file check


> -----Original Message-----
> From: dOCtoR MADneSs [mailto:doctor (at) makelofine.org]
> 
> You could try something like this :
> in local-client.cfg add a section for this host :
> [my_host]
> file:`sudo ls /your/file`
> and in hobbit-clients.cfg add a line in your host section :
> HOST=my_host
> FILE /your/file YOUR_SWITCHES
> 
> anyone disagree with it ?

Somewhat of a security risk; when using sudo, I recommend using 
full path to the executable: 
sudo /bin/ls /your/file

and in your /etc/sudoers file:

# Hobbit may run /bin/ls but flags are not allowed
hobbit   ALL = NOPASSWD: /bin/ls [!-]*


t09trbrxs# su - hobbit
hobbit (at) t09trbrxs:~> sudo /bin/ls /root/.ssh/authorized_keys
/root/.ssh/authorized_keys
hobbit (at) t09trbrxs:~> sudo /bin/ls --color=always
/root/.ssh/authorized_keys
hobbit's password:
hobbit (at) t09trbrxs:~>

To unsubscribe from the hobbit list, send an e-mail to
hobbit-unsubscribe (at) hswn.dk



To unsubscribe from the hobbit list, send an e-mail to
hobbit-unsubscribe (at) hswn.dk