Lab
A Cloud Guru

Granting `sudo` Privileges to Confined Users

In this lab, we'll review the process of granting `sudo` privileges to SELinux confined users. When working with SELinux confined users, you may run into problems with Linux users not being able to use `sudo` anymore. We'll discuss why this happens and how to resolve the issue. *This course is not approved or sponsored by Red Hat.*

Try for free Contact sales

Path Info

Level

Intermediate

Duration

30m

Published

Jul 02, 2019

Challenge

Map `pbeesly` and `jhalpert` to the Appropriate SELinux User
1. Become root.
```
sudo su
```
1. Run the following commands to map pbeesly and jhalpert to the staff_u SELinux user:
```
semanage login -a -s "staff_u" pbeesly  
semanage login -a -s "staff_u" jhalpert
```
Challenge

Add `pbeesly` and `jhalpert` to the `sudoers` File
1. Open the sudoers file.
```
visudo
```
1. Type / and search for the line root ALL=(ALL) ALL.
2. Add the following two lines under the line root ALL=(ALL) ALL:
```
pbeesly  ALL=(ALL)  TYPE=administrator_t  ROLE=administrator_r  /bin/sh
jhalpert  ALL=(ALL)  TYPE=administrator_t  ROLE=administrator_r  /bin/sh
```
Challenge

Update the SELinux Security Context of Each User's Home Directory
1. Run the following commands to update the SELinux security context of each user's home directory:
```
restorecon -FR -v /home/pbeesly
restorecon -FR -v /home/jhalpert
```

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.