Sudo and umask

Thierry Leurent thierry.leurent at asgardian.be
Fri Apr 24 12:45:19 UTC 2009


Hello,

I'm working on a project where a all member (Group1) of a group can write
in files owned by the others members.

I have change the umask to 002

Members of an other group (Group2) can run scriptes that erase some of
this files.
I have make a technical user batchuser member of Group1, I have add a rule
in sudoers to permit the members of Group2 to run the script as batchuser.

As member of Group2, I make sudo -u batchuser -E thescript
I see that the file created by thescript have right as rw_r__r__ if I add
a umask command I see 22.

I cannot change all scripts to add an umask command.

Do you have an idea.
I try to add a line Defaults:%Group1 umask=0002 in my sudoers file but
that don't work.


-- 
Thierry Leurent





More information about the redhat-sysadmin-list mailing list