[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Correct sudoers file configuration



On Tue, May 26, 2009 at 3:32 AM, thveillon.debian
<thveillon.debian@googlemail.com> wrote:
> Jason Filippou wrote:
>> Hello,
>>
>> When I first installed squeeze on my system, and being oblivious as to
>> the presence of any sudoers file in general, I asked a friend to help me
>> with the setting up of the sudoers file. I have a sneaking suspicion,
>> however, that the configuration applied might be flawed, since whenever
>> I'm required to input my password by sudo (to download and install
>> software, for instance), the password required is my account password,
>> and not the sudo password. Here is my sudoers file:
>>
>> # Host alias specification
>>
>> # User alias specification
>>
>> # Cmnd alias specification
>>
>> # User privilege specification
>> root    ALL=(ALL) ALL
>> jason   ALL=(ALL) ALL
>> # Uncomment to allow members of group sudo to not need a password
>> # (Note that later entries override this, so you might need to move
>> # it further down)
>> # %sudo ALL=NOPASSWD: ALL
>>
>> I suspect that something may be wrong at line
>>
>>  jason   ALL=(ALL) ALL
>>
>> Anybody can help me with this?
>>
>> Thanks,
>> Jason
>
> Hi,
>
> this is standard sudo behavior if you don't have a root account on your
> machine. The line you refers to means that "jason" can use sudo from
> anywhere (locally or remotely), to acquire any identity, and run any
> command.
> If you use the default:
>
> Defaults  targetpw
>
> sudo will ask for the targeted user's password, if you just use "sudo"

"su" . . . right?

> which implies obtaining root privileges, then the root passwd will be
> asked for. To always ask for the root password use:
>
> Defaults    rootpw
>
>
> You need to use the command "visudo" to edit the sudo configuration file
> (/etc/sudoers).
>
>
> Tom
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>



-- 
www.nealhogan.net          www.lambdaserver.com


Reply to: