Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #242536

Re: Don't try this at home kids

Show all headers | View raw

On Mon 29 Nov 2021 at 17:47:24 (-0500), Jude DaShiell wrote:
> sudo doesn't ask me for my password and I didn't even touch /etc/sudoers
> to do it.  A file placed in /etc/sudoers.d with permissions of 0440 having
> any name you choose and contents like:
> user ALL=(ALL) NOPASSWD:ALL
> in it with user being the account name will do it.

As /etc/sudoers already contains the line:

  %sudo   ALL=(ALL:ALL) ALL

one should be able to achieve the same effect by
adding the user to the sudo group.

> On Tue, 30 Nov 2021, Jeremy Ardley wrote:

> > edit /etc/sudoers and modify / add
> >
> > username ALL=(ALL) NOPASSWD:ALL
> >
> > P.S. I am totally unconvinced about the arguments for using sudo rather than
> > running as root. You can do exactly the same damage with sudo as being root
> > user.

You don't have to use sudo in the manner shown above. You can use
it to allow certain users to run certain commands. I use it to run
a defined set of routine commands without having to bother to switch
to root, or to authenticate, or be careful, or be sober.

> > P.P.S The conventional instruction is to use visudo to do the edits. Which
> > means using Vi, which is another anachronism that should be humanely put down.

Not here. The only editor I run as root is nano, whether I start it
with visudo, vi, vim, emacs, etc. They're all aliased to nano (except
the first), and always have been. (Or ae, back in the mists of time.)

Cheers,
David.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Don't try this at home kids Bob Bernstein <poobah@ruptured-duck.com> - 2021-11-29 23:40 +0100
  Re: Don't try this at home kids Jeremy Ardley <jeremy@ardley.org> - 2021-11-29 23:50 +0100
    Re: Don't try this at home kids Jude DaShiell <jdashiel@panix.com> - 2021-11-29 23:50 +0100
      Re: Don't try this at home kids David Wright <deblis@lionunicorn.co.uk> - 2021-11-30 05:50 +0100
        Re: Don't try this at home kids Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2021-11-30 07:00 +0100
          Re: Don't try this at home kids Paul Johnson <baloo@ursamundi.org> - 2021-11-30 18:20 +0100
            Re: Don't try this at home kids Greg Wooledge <greg@wooledge.org> - 2021-11-30 19:20 +0100
              Re: Don't try this at home kids David Wright <deblis@lionunicorn.co.uk> - 2021-12-03 03:50 +0100
            Re: Don't try this at home kids Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2021-11-30 20:40 +0100
              Re: Don't try this at home kids Andrei POPESCU <andreimpopescu@gmail.com> - 2021-12-05 16:40 +0100
        Re: Don't try this at home kids Andrei POPESCU <andreimpopescu@gmail.com> - 2021-12-05 16:50 +0100
    Re: Don't try this at home kids Darac Marjal <mailinglist@darac.org.uk> - 2021-11-30 00:00 +0100
    Re: Don't try this at home kids "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2021-11-30 00:20 +0100
      Re: Don't try this at home kids Jeremy Ardley <jeremy@ardley.org> - 2021-11-30 00:30 +0100
      Re: Don't try this at home kids John Hasler <john@sugarbit.com> - 2021-11-30 01:10 +0100
      Re: Don't try this at home kids Bob Bernstein <poobah@ruptured-duck.com> - 2021-11-30 01:10 +0100
      Re: Don't try this at home kids Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-11-30 01:30 +0100
        Re: Don't try this at home kids Tom Dial <tddial@comcast.net> - 2021-11-30 05:30 +0100
          Re: Don't try this at home kids Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-03 05:50 +0100
  Re: Don't try this at home kids Igor Korot <ikorot01@gmail.com> - 2021-11-30 00:00 +0100
  Re: Don't try this at home kids Pierre-Elliott Bécue <peb@debian.org> - 2021-11-30 00:00 +0100

csiph-web