Sudo access to a single service – RHEL 7 / CentOS 7

Issue

You need to give only the apache / httpd restart permission to the developers via sudo.

Solution

  • Add the below lines to /etc/sudoers

Cmnd_Alias WEBDEVS = /sbin/service httpd *
user1 ALL = NOPASSWD:WEBDEVS

  • Now the user can run the below commands to any action (start / stop / restart etc) on httpd service.

sudo /sbin/service httpd restart

Eg:

[root@rhel7 ~]# su - user1
[user1@rhel7 ~]$ sudo /sbin/service httpd restart
Redirecting to /bin/systemctl restart httpd.service

0 0 votes
Article Rating
Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x
Scroll to Top