Script executed by www-data creates an at job.
Afterwards, normal Linux user cannot remove this job (atrm) because "Not owner".
How can this be achieved?
Asked
Active
Viewed 292 times
0
-
1Use `sudo atrm
`. – Thomas Dec 31 '18 at 11:08 -
This does not solve the issue: The user I need to cancel the job is not a sudoer (and I don't want it to be sudoer). – Uxio Dec 31 '18 at 11:16
-
Then only allow the user to execute `sudo -u www-data /usr/bin/atrm`? would be an option? – Thomas Dec 31 '18 at 11:32
-
Certainly, it would! – Uxio Dec 31 '18 at 11:50
1 Answers
1
Best would be to use sudo to remove another user's job. To limit thesudo command of the user that should be able to kill the job, add a sudo rule as follows.
user ALL=(www-data) /usr/bin/atrm
Where
useris the username you want to be able to kill the jobALLis the hostname that is allowedwww-datais the user which is allowed to run this command/usr/bin/atrmis the command that theuseris allowed to run.
Now your user can execute atrm as the user www-data.
sudo -u www-data /usr/bin/atrm <job-number>
Thomas
- 4,155
- 5
- 21
- 28