Keeping CentOS up to date in a flexible way without giving out root credentials?

Question

Title was "Running yum update && yum upgrade without root-privileges?"

I want to allow an unprivileged user to start a system update on a RHEL-based system (CentOS 7). yum-cron is not an alternative, because the user should be flexible e.g. he should be able to decide when to shutdown the machine.

Any idea?

Jakuje · Accepted Answer · 2015-11-15T14:52:39.840

5

You can simply setup your sudoers file and allow a user or a group to execute this one specific command. Syntax would look somehow like this in file /etc/sudoers (edit with visudo!):

user    ALL=(root) NOPASSWD: /usr/bin/yum update root

If you omit the NOPASSWD part, the user will have to provide his password. The users will get to run this simply as sudo yum update.

For more information, you can consult manual pages for sudoers(5)

edited Nov 15 '15 at 14:52

answered Nov 14 '15 at 19:18

Jakuje

21,357

Thanks, already thought about a sudo solution. Are you sure about the 'obsolete alias' aspect? In my understanding it sets the --obsoletes flag and is not obsolete in itself. – Jodka Lemon Nov 15 '15 at 14:51
yes, you are right. I read and wrote too fast. Sorry for confusion. – Jakuje Nov 15 '15 at 14:53

score 0 · Answer 2 · answered Nov 14 '15 at 14:04

0

Simple answer is no, it is not possible without root priviledges.

Deeper answer is you could compromise your system by making a sudo user user without a password. Which I don't recommend.

answered Nov 14 '15 at 14:04

Vlastimil Burián

28,462

1

What about manually executing yum-cron. Is that possible? – Jodka Lemon Nov 14 '15 at 14:19
I will rephrase my question. – Jodka Lemon Nov 14 '15 at 14:20

Keeping CentOS up to date in a flexible way without giving out root credentials?

2 Answers2