如何只允许在指定路径上使用sudo？

Question

in Linux:

I want to limited user only can do sudo on specify path.

sudo chmod works on /home/Krome/revA

but sudo chmod failed on /home/Krome

Thanks!

Answer 1

可以使用chroot将用户或进程限制为某个路径-这里的问题是，在chroot之后， $PATH和动态加载的对象中的命令将不再可访问，因此您需要一个静态链接的shell来执行chroot以及用户应能够发出的内置命令。

Answer 2

I don't think it possible, and am pretty sure it's not reasonable.

chmod would work inside /home/Krome if it's the user's home folder.

I think you need a regular user (without sudo ), and everything else can be managed by adding that user to groups and sharing some folders to those groups.

Answer 3

Add to /etc/sudoers something like the following line:

%users ALL = NOPASSWD: /bin/chmod [ugoa][-+=][rwxXst] /home/Krome/*

It basically says that all group users members can invoke sudo chmod in symbolic mode on anything under /home/Krome/ path.

See man sudo for more details.