# What minimum permissions are needed to run chef-solo?

**URL:** <https://discourse.chef.io/t/what-minimum-permissions-are-needed-to-run-chef-solo/5048>\
**Category:** Chef Infra (archive)\
**Created:** [February 19, 2014, 7:52am UTC](https://discourse.chef.io/t/what-minimum-permissions-are-needed-to-run-chef-solo/5048 "2014-02-19T07:52:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Atsuhiko\_Kimura](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/atsuhiko_kimura/32/375_2.png) [@Atsuhiko\_Kimura](https://discourse.chef.io/u/Atsuhiko_Kimura)\
**Post date:** [February 19, 2014, 7:52am UTC](https://discourse.chef.io/t/what-minimum-permissions-are-needed-to-run-chef-solo/5048/1 "2014-02-19T07:52:34Z")

</div>

Hi,

I’m using chef-solo as a non root user named ‘chef’. I would like to restrict  
this user’s commands to the minimum necessary. So I have added the below line  
in visudo.

chef ALL=(ALL) NOPASSWD: /usr/bin/chef-solo

Chef-solo seems to run normally in this setting. Is this OK?

Thanks,  
Atsuhiko

---

<div class="post-metadata">

**Author:** ![Ranjib](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/ranjib/32/1040_2.png) [@Ranjib](https://discourse.chef.io/u/Ranjib)\
**Post date:** [February 19, 2014, 9:15am UTC](https://discourse.chef.io/t/what-minimum-permissions-are-needed-to-run-chef-solo/5048/2 "2014-02-19T09:15:35Z")

</div>

yeah.

On Tue, Feb 18, 2014 at 11:52 PM, [atskimura@gmail.com](mailto:atskimura@gmail.com) wrote:

> Hi,
> 
> I'm using chef-solo as a non root user named 'chef'. I would like to  
> restrict  
> this user's commands to the minimum necessary. So I have added the below  
> line  
> in visudo.
> 
> chef ALL=(ALL) NOPASSWD: /usr/bin/chef-solo
> 
> Chef-solo seems to run normally in this setting. Is this OK?
> 
> Thanks,  
> Atsuhiko

---

<div class="post-metadata">

**Author:** ![Atsuhiko\_Kimura](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/atsuhiko_kimura/32/375_2.png) [@Atsuhiko\_Kimura](https://discourse.chef.io/u/Atsuhiko_Kimura)\
**Post date:** [February 19, 2014, 2:20pm UTC](https://discourse.chef.io/t/what-minimum-permissions-are-needed-to-run-chef-solo/5048/3 "2014-02-19T14:20:08Z")

</div>

Thank you!

On Wed, Feb 19, 2014 at 6:15 PM, Ranjib Dey [dey.ranjib@gmail.com](mailto:dey.ranjib@gmail.com) wrote:

> yeah.
> 
> On Tue, Feb 18, 2014 at 11:52 PM, [atskimura@gmail.com](mailto:atskimura@gmail.com) wrote:
> 
> > Hi,
> > 
> > I'm using chef-solo as a non root user named 'chef'. I would like to  
> > restrict  
> > this user's commands to the minimum necessary. So I have added the below  
> > line  
> > in visudo.
> > 
> > chef ALL=(ALL) NOPASSWD: /usr/bin/chef-solo
> > 
> > Chef-solo seems to run normally in this setting. Is this OK?
> > 
> > Thanks,  
> > Atsuhiko