Hello,

We have a script which runs in a loop and contains a command like:

    for ONE_USER in $USER_GROUP
    {
        sudo $BINDIR/getmail $ONE_USER $TOPDIR
    }

This script is executed by a non-root user and generates tons of
output in /var/log/secure (this is an old Fedora Core system,
eventually I'll get around to replace it with CentOS 5).

Is there a way to limit sudo NOT to log just this specific case - i.e.
only allow this user to execute $BINDIR/getmail with two parameters,
don't ask for a password but also don't log ONLY execution which was
permitted by this line?

The script also calls sudo with another specific command which I'd
like to do the same for.

So far I didn't find a way to do that.

Thanks,

--Amos

_______________________________________________
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Reply via email to