Re: Correct sudoers file configuration

On Tue, May 26, 2009 at 3:32 AM, thveillon.debian
<thveillon.debian@xxxxxxxxxxxxxx> wrote:
Jason Filippou wrote:
Hello,

When I first installed squeeze on my system, and being oblivious as to
the presence of any sudoers file in general, I asked a friend to help me
with the setting up of the sudoers file. I have a sneaking suspicion,
however, that the configuration applied might be flawed, since whenever
I'm required to input my password by sudo (to download and install
software, for instance), the password required is my account password,
and not the sudo password. Here is my sudoers file:

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root    ALL=(ALL) ALL
jason   ALL=(ALL) ALL
# Uncomment to allow members of group sudo to not need a password
# (Note that later entries override this, so you might need to move
# it further down)
# %sudo ALL=NOPASSWD: ALL

I suspect that something may be wrong at line

 jason   ALL=(ALL) ALL

Anybody can help me with this?

Thanks,
Jason

Hi,

this is standard sudo behavior if you don't have a root account on your
machine. The line you refers to means that "jason" can use sudo from
anywhere (locally or remotely), to acquire any identity, and run any
command.
If you use the default:

Defaults  targetpw

sudo will ask for the targeted user's password, if you just use "sudo"

"su" . . . right?

which implies obtaining root privileges, then the root passwd will be
asked for. To always ask for the root password use:

Defaults    rootpw


You need to use the command "visudo" to edit the sudo configuration file
(/etc/sudoers).


Tom


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx





--
www.nealhogan.net www.lambdaserver.com


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Relevant Pages

  • Re: "sudo" command passwd is not canceled.
    ... the /etc/sudoers file have modified with no required passwd. ... Use 'sudo -k' to revoke your permissions. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". ...
    (Debian-User)
  • my (simple) sudoers doesnt work
    ... # Uncomment to allow members of group sudo to not need a password ... STOP ALL= NOPASSWD: SLEEP, HALT, REBOOT ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: permisions in the /dev directory
    ... >> Yes, the user has to type 'sudo' before they can do the damage, but these ... >ADMINS DUMP ... >To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org ...
    (Debian-User)
  • Re: Xorg starts only manually
    ... sudo update-rc.d gdm defaults ... other hand, if the GDM init script is missing for some reason, try ... installing the package "gdm". ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: Paternalistic D-Bus Restrictions (was Re: Applications, Accessories, Root Terminal fails sil
    ... especially for experienced users like myself; ... NEED to be able to use gnome-terminal as root. ... does this problem happens if user uses sudo mode for gksu. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)