Give group permission to only kill specific process which is started by root

Question

I want the members of a certain group to kill python.

pidof python | xargs kill

This is no problem when python has been started by themself. But when root has started a python process than the users of the group can't kill python.

I can fix this to allow the group members to use kill without password.

%nohup ALL=(root) NOPASSWD: /usr/kill

But now the group members can kill each process. I only want them to kill python.

How can I give permission to a group to kill only a specific proces that has been started by root?

Tom · Answer 1 · 2012-07-24T15:42:37.887

0

Try this: remove the kill authority, put your kill command that kills your specific process in a shell script, make the owner of the script be root, and set the group authority for the script to be a new group containing the authorized users.

edited Jul 24 '12 at 15:42

answered Jul 24 '12 at 13:25

Tom

750

The OP states that kill cannot be used as it requires a non-static parameter. – nanofarad Jul 24 '12 at 14:34

nanofarad · Accepted Answer · 2012-07-24T14:32:37.303

0

I would recommend writing a shell script that is allowed with NOPASSWD that simply contains the following:

#!/bin/bash
killall python
#pkill could also have been used

edited Jul 24 '12 at 14:32

answered Jul 24 '12 at 13:25

nanofarad

20,717

Give group permission to only kill specific process which is started by root

2 Answers2