title: Unable to execute /sbin/ip addr del on remote machine
body: <p>I am trying to understand the kind of elevated permission that would be required for executing the /sbin/ip command on a linux server. 
  I have basic understanding and I am able to make it work partially. But looking for suggestion on what could be missing in the setup below:</p>
  
  <p>Setup - linux distro SLES 11.3 
  vm-manager, vm1, vm2. (passwordless auth setup between the 3 for user - test_user)</p>
  
  <p>sudoers file on all servers have this entry:</p>
  
  <pre><code># Command alias specification
  Cmnd_Alias CAL=/sbin/ip
  # User configuration to allow user to access commands only from the alias group CAL
  test_user ALL=(ALL) NOPASSWD: CAL
  </code></pre>
  
  <p>From the vm-manager, I am trying to execute ip command as below - </p>
  
  <pre><code>vm-manager&gt; ssh test_user@vm1 "/sbin/ip addr show”
  </code></pre>
  
  <p>Successful output.</p>
  
  <p>However, </p>
  
  <pre><code>vm-manager&gt; ssh test_user@vm1 "/sbin/ip addr del &lt;my VIP&gt;/22 dev eth0”
  RTNETLINK answers: Operation not permitted
  </code></pre>
  
  <p>Why is the 'ip addr del' command not permitted when 'ip addr show' is being permitted..? </p>