[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /etc/sudoers precedence question



Dan,

Are you running the "update" command using the full path?
/usr/cs/2002/omacneil/sbin/update


Your sudo file allows running the above command only with no password. Also you should note that a sudo file like this allows for you to get a root shell via "sudo bash", which may or may not be what you want to allow.

Mark

Dan MacNeil wrote:

Given the sudoers file below omacneil (as a member of wheel) should be
able to do anything with a password and should be able to run "update"
with no password.

I can run everything but only with a password.

What am I missing?

reversing the order of %wheel & omacneil lines doesn't change things.


###########
# User privilege specification
root    ALL=(ALL) ALL
ken     ALL=(ALL) ALL

Defaults        !lecture, insults
%wheel  ALL=(ALL)       ALL
omacneil localhost=NOPASSWD: /usr/cs/2002/omacneil/sbin/update







Reply to: