Managing Privilege Elevation in SUSE Linux Enterprise

Edit the sudoers file:

sudo -i visudo

Edit the contents of the file so it contains these lines in the appropriate sections (Hint: Use / to find the areas, and there are three lines of content to be added.):

User_Alias ADMINUSER = testuser
Cmd_Alias ADMINTASKS = /usr/sbin/useradd, /bin/passwd, sudoedit /etc/hosts
ADMINUSER ALL=ADMINTASKS

Comment out the following lines (Defaults targetpw may not exist):

#Defaults targetpw
#ALL ALL=(ALL)ALL

Save the file and verify testuser is able to create a user:

su testuser   #password is P@ssw0rd
sudo useradd someuser

See if someuser appears in /etc/passwd:

grep some /etc/passwd

As the cloud_user, edit sudoers:

visudo

Copy the root entry to the next line and substitute admin_user for root in the user position:

root ALL=(ALL)ALL
admin_user ALL=(ALL)All

Save and exit, and then become the admin_user:

su admin_user 

Run visudo to see if you are allowed:

sudo visudo

Exit the file.