Question

A junior operator named 'deploy' must be allowed to restart only the nginx service via sudo without a password, but should not gain any other elevated privileges. As the administrator, which entry should you add using visudo to accomplish this securely?

Accepted Answer

deploy ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart nginx

Answer

deploy ALL=(ALL) NOPASSWD: ALL

Answer

%deploy ALL=(ALL) /usr/bin/systemctl restart nginx

Answer

deploy ALL=(ALL) PASSWD: /usr/bin/systemctl *