<div>
You can create an exhaustive list of allowed command lines. and put those in the soduers file.<br>(including arguments)... &nbsp;readonly access requires you only allow tools that can read files.<br><br>OR you need to setup selinux with profiles. (not a simple task)....&nbsp;
</div>


<div>
<div class="content wysiwyg-content fr-view">
Hello experts<br>I have some users that have full sudo access and then I disabled them from sudo but I need to let them able to run specific command s under sudo or without sudo &nbsp;i.e &nbsp; limit access without sudo to do certain task s as checking status config files &nbsp;start services upload data to &nbsp;certain folder for website<br><br>
</div>
</div>



Hello experts
I have some users that have full sudo access and then I disabled them from sudo but I need to let them able to run specific command s under sudo or without sudo  i.e   limit access without sudo to do certain task s as checking status config files  start services upload data to  certain folder for website

make sudo run only on certain commands and as readonly  or limit access without sudo to do certain task  as checking status config files  start services

Linux is a UNIX-like open source operating system with hundreds of distinct distributions, including: Fedora, openSUSE, Ubuntu, Debian, Slackware, Gentoo, CentOS, and Arch Linux. Linux is generally associated with web and database servers, but has become popular in many niche industries and applications.

Linux

permission

Sudo

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.