Lab
A Cloud Guru

Managing Privilege Elevation in SUSE Linux Enterprise

In this hands-on lab, we will be looking at how we can delegate privilege elevation and allow users to access sensitive areas of the system in a controlled manner.

Try for free Contact sales

Path Info

Level

Beginner

Duration

30m

Published

Jul 23, 2020

Challenge

Configure `sudo` to Create an `ADMINUSER` `User_Alias` Containing `testuser` and an `ADMINTASKS` `Cmnd_Alias` for the Required Commands. Verify `testuser` Can Complete the Commands.
1. Edit the sudoers file:
```
sudo -i visudo
```
2. Edit the contents of the file so it contains these lines in the appropriate sections (Hint: Use / to find the areas, and there are three lines of content to be added.):
```
User_Alias ADMINUSER = testuser
Cmd_Alias ADMINTASKS = /usr/sbin/useradd, /bin/passwd, sudoedit /etc/hosts
ADMINUSER ALL=ADMINTASKS
```
3. Comment out the following lines (Defaults targetpw may not exist):
```
#Defaults targetpw
#ALL ALL=(ALL)ALL
```
4. Save the file and verify testuser is able to create a user:
```
su testuser   #password is P@ssw0rd
sudo useradd someuser
```
5. See if someuser appears in /etc/passwd:
```
grep some /etc/passwd
```
Challenge

Grant `admin_user` the Same Permissions as the `root` User
1. As the cloud_user, edit sudoers:
```
visudo
```
2. Copy the root entry to the next line and substitute admin_user for root in the user position:
```
root ALL=(ALL)ALL
admin_user ALL=(ALL)All
```
3. Save and exit, and then become the admin_user:
```
su admin_user 
```
4. Run visudo to see if you are allowed:
```
sudo visudo
```
5. Exit the file.

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.