<html><body>Disregard .. I figured it out just added /usr/bin fdisk -l to command list run as user root and applied the command to sudo rule Running as expected where sudo fdisk /dev/sda fails but sudo fdisk -l works Sean Hogan <img width="16" height="16" src="cid:1__=88BB0A63DFE45A128f9e8a93df938690918c88B@" border="0" alt="Inactive hide details for Sean Hogan---03/27/2017 01:55:55 PM---Hello, I was wondering how possible it would be to allow sudo">Sean Hogan---03/27/2017 01:55:55 PM---Hello, I was wondering how possible it would be to allow sudo commands with From: Sean Hogan/Durham/IBM@IBMUS To: freeipa-users <freeipa-users@redhat.com> Date: 03/27/2017 01:55 PM Subject: [Freeipa-users] Sudo Rule flag limitations Sent by: freeipa-users-bounces@redhat.com <hr width="100%" size="2" align="left" noshade style="color:#8091A5; "> Hello, I was wondering how possible it would be to allow sudo commands with certain flags but not the actual command Case in point: If a user requests sudo fdisk -l to view partitions can this be set without giving access to sudo fdisk /dev/sda ? Would the sudo rule have to deny fdisk /dev/sda but allow fdisk -l? Not really sure how that would work. <table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td width="267">ipa-client-3.0.0-50.el6.1.x86_64 ipa-server-selinux-3.0.0-50.el6.1.x86_64 ipa-server-3.0.0-50.el6.1.x86_64 sssd-ipa-1.13.3-22.el6_8.4.x86_64 python-libipa_hbac-1.13.3-22.el6_8.4.x86_64 ipa-admintools-3.0.0-50.el6.1.x86_64 python-iniparse-0.3.1-2.1.el6.noarch </td></tr></table> <table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td width="274"><img width="1" height="1" src="cid:2__=88BB0A63DFE45A128f9e8a93df938690918c88B@" border="0" alt=""></td></tr></table> Thank you Sean Hogan <tt>-- Manage your subscription for the Freeipa-users mailing list: </tt><tt><a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></tt><tt> Go to </tt><tt><a href="http://freeipa.org">http://freeipa.org</a></tt><tt> for more info on the project</tt> </body></html>