Sudo: Difference between revisions

Overview

In a nutshell, sudo permissions are defined in {{code|/etc/sudoers and {{code|/etc/sudoers.d/. Permissions are defined like so:

%groupname workstation=/bin/command
username workstation=/bin/command
username workstation=(run-as user) /bin/command

Replace any of the above with {{code|ALL to have it match anyone. eg:

ALL ALL=ALL

You can use {{code|NOPASSWD: /bin/command to have it not prompt for the user's password.

You can verify whether your changes worked by listing sudo access:

sudo -l

Configure sudo to include /etc/sudoers.d/

For the configs in {{code|/etc/sudoers.d/ to work, you must place an existing file with perms set to 0440 into {{code|/etc/sudoers.d/.

You cannot create the file directly in {{code|/etc/sudoers.d/ because it will not work!

Also ensure the {{code|#includedir directive is defined in {{code|/etc/sudoers.

Troubleshooting

sudo: sorry, you must have a tty to run sudo

Ensure that you do not require tty. Either comment out or use !requiretty .

# cat /etc/sudoers
Defaults   ! requiretty

If you want to run a command as another user, you could also try {{code|su. For example:

su user -c 'whoami'

sudo: no tty present and no askpass program specified

make sure you have NOPASSWD set in your sudoers file. eg:

 <USER> <host>=NOPASSWD:<command>

v t e Linux

Various Linux Notes	/etc/fstab Access.conf ACL Apache Proxy to Internal Server APM X-C1 (Mustang) ARP Authselect Bash Scripting Blockparser Booting Linux without a Graphics Card Building Container Images Burning CD/DVD in Linux Clear RAID Signatures on Linux Cobbler Colorized Terminal Outputs Compiling MIPS Configure Sendmail CPanel CPanel Fork Bomb Protection CPU Frequency Scaling Create a Linux User with an Empty Password Cron and PAM Issues Dell OpenManage Diff Two Command Outputs DirectAdmin Disable Filesystem Check on Startup DNS Ad Blocker Driver Disk Drop caches End / Home keys don't work in Terminal Entropy in the Linux Kernel Entropy Source using RTL-SDR Exit Codes Extract .exe Resources with dd File Attributes Fixing ixgbe unsupported SFP+ module type was detected Get Active Linux Virtual Console Getting Hardware UUID Hosts.deny How to change Linux desktop user directories How to hot-swap SATA disks on Linux HP Smart Storage Administrator Hyper-threading IBM Spectrum Archive IBM Spectrum Protect IBM Tape IBM Tape Diagnostic Tool InterWorx Kerberize NFS Kerberize SSH Linux Clustering Linux Fonts Linux Namespaces Linux Network Interface Naming Linux Nvidia Driver Linux Process Accounting Linux Uptime in Seconds Linux UTF-8 Font Mainline Kernel on CentOS 7 Missing Fonts Mod fastcgi Install on Apache 2 / cPanel Mod fcgid Monitoring network traffic in Linux Mounting / Unmounting KVM Image Mounting Samba (CIFS) shares Multiple Networks on Linux MySQL Database with Hash Sign No Console Output Number of Files Opened Open OnDemand Packing and unpacking initrd PAM Issues Partition Alignment Patching a binary file with dd Perl Module Location Raspberry Pi Red Hat kickstart Red Hat to Debian Reverse SSH Tunnel Ruby on Rails under cPanel Rutorrent + rtorrent Installation Guide on CentOS 6.4 Self Signed SSL Certificates Service Management Sick Beard StartSSL Free Certificate Symlink Taking a Screenshot in X11 Timezone Tor TOR Transparent Proxy Traefik Troubleshooting a Slow Linux System Turning on swap with a page file Udev Rules Verify SSL Certificate matches Private Key VMware Workstation Webcam X Display Manipulation X Forwarding

Linux Tools and Utilites	Anaconda Ansible Aria2 Autofs Awk Badblocks Bash Shell Binwalk Bosh Ceph Chntpw Chrony Clonezilla Cloud-init CloudStack Column Cron Curl Cvs2git Date Dbus Dd Dm-crypt Dovecot DRBD ElasticSearch Enroot Environment Module Envsubst Fail2ban FFmpeg Find Firecracker Flashrom Foreman FortiClient Fswebcam Galaxy Git Gnome Gobetween GPFS Grafana Grub Hdparm Home Assistant How to disable SELinux Htaccess Infiniband InfluxDB InfluxDB 1.x Insert a kickstart file into a iso image Inspircd IOzone Iperf3 Ipmitool Irqbalance John The Ripper Lightdm Lm sensors Logrotate LSF LVM Lynx Mailx Md5sum Mdadm Midnight Commander Motion Mount Mutt Nomad OpenLDAP Openocd OpenSSL OpenVPN Packer PHP Pi-hole Postgres PowerBroker Identity Service Proxmox Pueue PulseAudio Puppet Quota Red Hat Satellite Restic Rsync Rtorrent Ruby Sabnzbd Sage Samba Screen Sed SELinux Sendmail Shell Configs Singularity Sleep Slurm SMART Sonarr Sqlite SquashFS Squid SSH Steam Stoken Strace Sudo Sync Sysctl Syslog Sysrq System Security Services Daemon (SSSD) Systemd Tar Tcsh Telegraf Terraform Thttpd Tmux Tomcat Top Umask Unix2dos Vim Virsh Virt-customize VirtualBox VirtualGL Visidata Vnstat Weechat Wget XFS Youtube-dl ZFS Zram

Package Management	APT Pacman RPM Yum

Linux Distributions	Alpine Linux Arch Linux CentOS Fedora NixOS Red Hat Enterprise Linux Tails Tiny Core Linux Ubuntu

Networking	Blazemeter CSF/LFD Exim Firewall FreeIPA Get DHCP Network Settings IP Aliasing Ipset IPTables IPv6 IPXE Link Aggregation Linux Network Namespaces MTU Net-tools to iproute2 Netcat Open vSwitch OpenWRT Postfix Raspberry Pi Torified Wifi Socat Static Routes StrongSwan Tcpdump Traffic Forwarder using IPTables Wi-Fi WireGuard

Containers	Docker Docker Compose Docker Swarm Helm K3s Kibana Kubernetes Mailu PKS Podman

@@ Line 1: / Line 1: @@
 == Overview ==
-In a nutshell, sudo permissions are defined in <code>/etc/sudoers</code> and <code>/etc/sudoers.d/</code>. Permissions are defined like so:
+In a nutshell, sudo permissions are defined in {{code|/etc/sudoers</code> and {{code|/etc/sudoers.d/</code>. Permissions are defined like so:
   %groupname workstation=/bin/command
@@ Line 7: / Line 7: @@
   username workstation=(run-as user) /bin/command
-Replace any of the above with <code>ALL</code> to have it match anyone. eg:
+Replace any of the above with {{code|ALL</code> to have it match anyone. eg:
   ALL ALL=ALL
-You can use <code>NOPASSWD: /bin/command</code> to have it not prompt for the user's password.
+You can use {{code|NOPASSWD: /bin/command</code> to have it not prompt for the user's password.
 You can verify whether your changes worked by listing sudo access:
@@ Line 19: / Line 19: @@
 == Configure sudo to include /etc/sudoers.d/ ==
-For the configs in <code>/etc/sudoers.d/</code> to work, you must place an existing file with perms set to 0440 into <code>/etc/sudoers.d/</code>.
+For the configs in {{code|/etc/sudoers.d/</code> to work, you must place an existing file with perms set to 0440 into {{code|/etc/sudoers.d/</code>.
-'''You cannot create the file directly in <code>/etc/sudoers.d/</code>''' because it will not work!
+'''You cannot create the file directly in {{code|/etc/sudoers.d/</code>''' because it will not work!
-Also ensure the <code>#includedir</code> directive is defined in <code>/etc/sudoers</code>.
+Also ensure the {{code|#includedir</code> directive is defined in {{code|/etc/sudoers</code>.
 == Troubleshooting ==
@@ Line 33: / Line 33: @@
   Defaults   ! requiretty
-If you want to run a command as another user, you could also try <code>su</code>. For example:
+If you want to run a command as another user, you could also try {{code|su</code>. For example:
   su user -c 'whoami'

Sudo: Difference between revisions

Revision as of 19:13, 24 February 2017

Overview

Configure sudo to include /etc/sudoers.d/

Troubleshooting

sudo: sorry, you must have a tty to run sudo

sudo: no tty present and no askpass program specified

Contents

Recent Changes

Recent Changes under Linux

Recent Changes under Guides

Ad-Free + Tracker-Free

Contents