We have several tier2 admins whom have very limited admin rights granted via sudo; As they have limited experience we really want to put them into a tight set of operations they can perform.
One of their tasks generally involves copying something to a sub directory of a root directory, say /data.
This directory is owned by another user and group as it is primarily accessing it and manipulates its contents.
If I grant them sudo cp access however I do leave the system open somewhat as they could over write a file anywhere on the sysyem whereas I only need them to be able to copy someting into /data and below.
Is it possible to allow sudo access to cp but only in a limited use case, I'm currently thinking not without my creating a script.
Another alternative is to establish a secured ftp service and grant them access that way. Thoughts welcome.