Sudoing a command with a redirection to a place owned by root

Question

I want to :
echo "some text" > /path/owned/by/root
With sudo., I would :
sudo sh -c 'echo "some text" > /path/owned/by/root'
, and it asks me for a password. Now I want to do it from a script with no password, so I put in the following lines in sudoers :
Cmnd_Alias TESTBACKUPMEDIA = /bin/sh -c 'echo * /path/owned/by/root/*'
dlsa oraculo = NOPASSWD: TESTBACKUPMEDIA
and it still asks for the password. How do I make the configuration in sudoers match the command line ?

Answer 1

Oops, I didn't notice ...
sudo sh -c 'echo "some text" > /path/owned/by/root'
... which accomplishes exactly the same thing as my script. To accomplish what you want, something only root can do with no password required, I'd bury it a little deeper in a little C program. The binary would be setuid on exec (chmod 4750) and access to it contolled by group ownership. Setuid on exec only sets the effective user id of a process and that's not enough for a shell script. The C wrapper is necessary to set the real user id as well.
#include <sys/types.h>
#include <unistd.h>
main()
    setuid((uid_t) 0);
    execl("/path2/script", "/path2/script");
You also want to be sure that the script and its directory are appropriately protected by ownership and permissions. Before doing this sort of thing, I like to look for other ways to accomplish the same thing that do not require root access. Often there is.