OT: allow ordinary user to read /var/log/audit/audit.log

[Ed Greshko]

On 06/13/2011 03:02 PM, Hiisi wrote:
> On 12 June 2011 17:30, Andre Speelmans <fedora-list at cosiso.nl> wrote:
>>> Surely I can. I just thought there should be the other way. Say, thru
>>> sudo. Well, it seems that changing file attributes is the only way
>>> here.
>> Add this to the Cmnd_alias:
>> less  /var/log/audit/audit.log
>>
> When I'm trying to save /etc/sudoers with the folloeing line:
>
> Cmnd_Alias HOSPES = /sbin/service, /sbin/chkconfig,
> /usr/sbin/setsebool, /sbin/restorecon, /usr/sbin/semanage,
> /usr/sbin/setenforce, less  /var/log/audit/audit.log
> it falls with error:
> /etc/sudoers: syntax error near line 34 <<<
>
> What's wrong with it?

Full path to less?    /usr/bin/less