Safely Allow Users to Run Administrative Commands
If a user needs to run a small set of administrative commands, the preferred approach is usually a carefully scoped sudo rule rather than making arbitrary programs setuid root. Use sudo with least privilege Edit sudo policy with visudo or a file under /etc/sudoers.d/. Grant only the exact commands required, and avoid broad rules such … Read more