30.7. Listing and Displaying sudo Commands, Command Groups, and Rules

Listing and Displaying sudo Commands, Command Groups, and Rules in the Web UI

  1. Under the Policy tab, click Sudo and select Sudo Rules, Sudo Commands, or Sudo Command Groups.
  2. Click the name of the rule, command, or command group to display its configuration page.

Listing and Displaying sudo Commands, Command Groups, and Rules from the Command Line

To list all commands, command groups, and rules, use the following commands:
  • ipa sudocmd-find
  • ipa sudocmdgroup-find
  • ipa sudorule-find
To display information about a particular command, command group, or rule, use the following commands:
  • ipa sudocmd-show
  • ipa sudocmdgroup-show
  • ipa sudorule-show
For example, to display information about the /usr/bin/less command: 
$ ipa sudocmd-show /usr/bin/less
  Sudo Command: /usr/bin/less
  Description: For reading log files.
  Sudo Command Groups: files
For more information about these commands and the options they accept, run them with the --help option added.