linux user 특정 기간동안 root 권한 할당

target_id="userid"

echo -e "$target_id ALL=(ALL)\\tNOPASSWD: /bin/su" >> /etc/sudoers

echo "sed -i -e "/^$target_id/d" /etc/sudoers" | at 18:00 2013-11-15

 

 

유저 찾아서 있으면 2주까지 루트 권한 획득
#!/bin/bash
today=$(date "+%Y-%m-%d")
exdate=$(date -d "+14 days" "+%Y-%m-%d")
read -p "input user id : " userid
echo ==============================================
read -p "input ticket id (ex FI-0000) : " ticketid
bashuser=$(cat /etc/passwd |grep bash |awk 'BEGIN {FS = ":"} {print $1}')

        if echo $bashuser | grep -q -w $userid
                then
                        echo ${userid} account exist!
                        echo -e "$userid ALL=(ALL)\\tNOPASSWD: /bin/su" >> /etc/sudoers.d/$ticketid-$userid-$today
                        echo "remove date & file : $exdate $ticketid-$userid-$today" 
                        echo "rm -f /etc/sudoers.d/$ticketid-$userid-$today" | at 11:59 $today
                else
                        echo $userid account not exist!!
                        echo $userid account not exist!!
                        echo $userid account not exist!!
                        echo $userid account not exist!!
                fi
echo ==============================================