sudoers

Kevin Fries kevin at fries-biro.com
Mon Jul 14 21:27:26 MST 2014


Usually the sudoers file has a commented line like this for both the sudo
group and the more traditional wheel group.  I usually use the wheel group
to have access to all without password, and sudo group to have access with
password.

Much easier to administer.

Kevin
On Jul 14, 2014 8:48 PM, "Michael Havens" <bmike1 at gmail.com> wrote:

> I was wondering: these are the instructions I was given to make it so I
> don't need to input my password after I sudo.
> ---
> sudo visudo
> <password>
>
> comment out the line:
>
>   %sudo ALL=(ALL:ALL) ALL
>
> and add a new line below it like this:
>
>   %sudo ALL=(ALL)  NOPASSWD:  ALL
>
>   sudo useradd -G sudo <user>
> ---
> I was thinking that with the script being like that I probably don't need
> the last line because the way it is I am telling it no one needs a password
> with sudo. It would probably be more secure to have:
>
>   %sudo ALL=(ALL)  NOPASSWD:  <desired users>
>
> is that correct? If I had multiple users who I wanted to not use a
> password would I separate the users with a space or comma? If I only wanted
> one user to be able to sudo  it would be:
>
>   %sudo <user>=(ALL)  NOPASSWD:  <user>
>
> what is the point of th ALL surrounded by parentheses?
> :-)~MIKE~(-:
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20140714/c8635f24/attachment.html>


More information about the PLUG-discuss mailing list