Sudo: Difference between revisions

From Leo's Notes
This page was last edited on 20 January 2015, at 19:58.
No edit summary
su instead of sudo
Line 30: Line 30:


Ensure that you do not require tty. Either comment out or use !requiretty .
Ensure that you do not require tty. Either comment out or use !requiretty .
# cat /etc/sudoers
# cat /etc/sudoers
Defaults  ! requiretty
Defaults  ! requiretty


If you want to run a command as another user, you could also try <code>su</code>. For example:
su user -c 'whoami'


=== sudo: no tty present and no askpass program specified ===
=== sudo: no tty present and no askpass program specified ===

Revision as of 19:58, 20 January 2015

In a Nutshell

In a nutshell, sudo permissions are defined in /etc/sudoers and /etc/sudoers.d/. Permissions are defined like so:

%groupname workstation=/bin/command
username workstation=/bin/command
username workstation=(run-as user) /bin/command

Replace any of the above with ALL to have it match anyone. eg:

ALL ALL=ALL

You can use NOPASSWD: /bin/command to have it not prompt for the user's password.

You can verify whether your changes worked by listing sudo access:

sudo -l


Configure sudo to include /etc/sudoers.d/

For the configs in /etc/sudoers.d/ to work, you must place an existing file with perms set to 0440 into /etc/sudoers.d/.

You cannot create the file directly in /etc/sudoers.d/ because it will not work!

Also ensure the #includedir directive is defined in /etc/sudoers.

Troubleshooting

sudo: sorry, you must have a tty to run sudo

Ensure that you do not require tty. Either comment out or use !requiretty .

# cat /etc/sudoers
Defaults   ! requiretty

If you want to run a command as another user, you could also try su. For example:

su user -c 'whoami'

sudo: no tty present and no askpass program specified

make sure you have NOPASSWD set in your sudoers file. eg:

 <USER> <host>=NOPASSWD:<command>