授权某个linux系统root下命令给某个普通用户

###

1.创建test用户，设置密码

[root@jira ~]# useradd test
[root@jira ~]# passwd test
Changing password for user test.
New password: 
BAD PASSWORD: The password is shorter than 8 characters
Retype new password: 
passwd: all authentication tokens updated successfully.

2.授权test用户可以 以root权限运行netstat命令

[root@jira ~]# cat /etc/sudoers
# ****
## Allow root to run any commands anywhere 
root    ALL=(ALL)     ALL
#(为普通用户test赋予root权限）
#第一个ALL：所有地方都可以登陆，localhost只能本机登陆。
#第二个(ALL):表示什么身份的用户都执行。’
#第三个ALL：表示所有命令都可以使用
#NOPASSWD：表示不用输入root密码即可执行
test    ALL=(ALL) NOPASSWD:/usr/bin/netstat,/usr/bin/ps

## Allows members of the 'sys' group to run networking, software, 
## service management apps and more.
# %sys ALL = NETWORKING, SOFTWARE, SERVICES, STORAGE, DELEGATING, PROCESSES, LOCATE, DRIVERS

## Allows people in group wheel to run all commands
%wheel    ALL=(ALL)    ALL

## Same thing without a password
# %wheel    ALL=(ALL)    NOPASSWD: ALL

# ****

3.测试

# 未授权查看(需要密码，不能查看pid)
[test@jira ~]$ sudo netstat -lntup
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:
    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.
[sudo] password for test:
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp6       0      0 :::22                   :::*                    LISTEN      -                   
tcp6       0      0 :::7081                 :::*                    LISTEN      -                   
tcp6       0      0 :::3306                 :::*                    LISTEN      -# 授权后查看（不需要密码直接以root权限查看所有内容）       
[root@jira ~]# su - test
Last login: Thu Jan 14 15:44:25 CST 2021 on pts/2
[test@jira ~]$ sudo netstat -lntup
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1152/sshd           
tcp6       0      0 :::22                   :::*                    LISTEN      1152/sshd           
tcp6       0      0 :::7081                 :::*                    LISTEN      1613/docker-proxy   
tcp6       0      0 :::3306                 :::*                    LISTEN      1978/mysqld   

###