How disable mysql command in sudoers file?
- by Carlos A. Junior
How i can disable /usr/bin/mysql command in sudoers file ? ... Actually I've tryed use with this way:
%tailonly ALL=!/usr/bin/mysql
But when i'm access if user 'tailonly' of group 'tailonly', this command still enabled.
In resume, i'm only want that 'tailonly' user access 'tail -f /usr/app/*.log' ...
This is possible ?
Edit:
With this config, the user 'tailonly' still can access mysql terminal with 'mysql' command:
$: sudo su
$: visudo
Cmnd_Alias MYSQL = /usr/bin/mysql
Cmnd_Alias TAIL=/usr/bin/tail -f /jacad/jacad3/logs/*.log
# User privilege specification
root ALL=(ALL:ALL) ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) ALL
%swa ALL=/etc/init.d/jacad3 stop
%swa ALL=/etc/init.d/jacad3 start
%swa ALL=/etc/init.d/jacad3 restart
%swa ALL=sudoedit /jacad/jacad3/bin/jacad_start.sh
%tailonly ALL=ALL,!MYSQL
