Re: Debian 12.9 and use of sudo for regular accounts

[Lee <ler762@gmail.com>]

On Thu, Feb 20, 2025 at 6:42 PM Jeffrey Walton wrote:
>
> Hi Everyone,
>
> I have a fresh Debian 12.9 install. My user account is part of sudo
> group, and members of sudo can run any command.

No... the "sudo" user can run any command:
>     sudo    ALL=(ALL:ALL) ALL

I have
%sudo   ALL=(ALL:ALL) ALL
in my /etc/sudoers -- the leading "%" specifies a group

Regards
Lee



> However, I get an
> error when trying to use sudo:
>
>     $ sudo ls
>     [sudo] password for jwalton:
>     jwalton is not in the sudoers file.
>
>     $ groups
>     jwalton cdrom floppy sudo audio dip video plugdev users netdev
> bluetooth lpadmin scanner
>
>     $ su -
>     Password:
>
>     # grep -v -E '^#' /etc/sudoers | cat -s
>     Defaults        env_reset
>     Defaults        mail_badpass
>     Defaults
> secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
>
>     Defaults        use_pty
>
>     root    ALL=(ALL:ALL) ALL
>
>     sudo    ALL=(ALL:ALL) ALL
>
> I've rebooted the machine twice. I know the failure is not due to
> stale login information.
>
> Does anyone know why I cannot use sudo in this case?
>
> Jeff
>