Sudo access to a single service – RHEL 7 / CentOS 7
Issue
You need to give only the apache / httpd restart permission to the developers via sudo.
Solution
- Add the below lines to /etc/sudoers
Cmnd_Alias WEBDEVS = /sbin/service httpd *
user1 ALL = NOPASSWD:WEBDEVS- Now the user can run the below commands to any action (start / stop / restart etc) on httpd service.
sudo /sbin/service httpd restart
Eg:
[root@rhel7 ~]# su - user1
[user1@rhel7 ~]$ sudo /sbin/service httpd restart
Redirecting to /bin/systemctl restart httpd.service