Ubuntu Servers :: Disable 'sudo' For All Or A Particular User And Allow Only 'su'?
Jul 30, 2010How to disable 'sudo' for all or a particular user and allow only 'su'?
View 6 RepliesHow to disable 'sudo' for all or a particular user and allow only 'su'?
View 6 Repliesfor security reasons,I want to disable shutdown for normal user, but the post here does not help me. It is because when I open the /etc/X11/gdm/gdm.conf I just saw a blank file. I use the 9.10 version.
View 6 Replies View RelatedOriginal HOWTO can be found at: [URL]... So the other day I was in IRC and someone had brought up a problem where they created a new Administrative user, but didnt have rights to use sudo. Looked into the problem a little bit to figure out what was wrong, and it turns out that when you create a new user through the user manager (in kubuntu, anyways. Havent tested in Gnome.) the user gets added to the adm group, however, a quick look at the sudoers file shows that its looking for users in the admin group to allow the use of sudo. So, to solve the problem we do the following: If youre on the new admin user (which Im assuming you are) use the following commands:
Code:
su [insert username of old account without brackets]
sudo usermod -G admin [username of new admin account without brackets]
exit
Then simply logout, and then log back in (not always necessary, but the easiest way to flush the permissions.)
Code:
su [insert username of old account without brackets]
Means were going to Switch User to the old admin account
Code:
sudo usermod -G admin [username of new admin account without brackets]
This simply adds the admin group to the secondary group list for the new user
Code:
exit
Pretty self explanatory
Whenever I type in Sudo in my terminal, it asks for a Sudo password.. I have not set one up and I don't know what the sudo password is.. Can you disable it or change it?
View 3 Replies View RelatedHow do I disable sudo password for nano editor in my box ? I've already tried this following line in /etc/sudoers. But I haven't logged off or rebooted the box maybe this is why it did not work.
user ALL=(ALL) NOPASSWD: /usr/bin/nano
so for example when I try to edit file /etc/nginx/nginx.conf I run nano /etc/nginx/nfingx.conf
or this won't work because nginx.conf file belongs to root ?
I am wondering what the easiest way for me to disable su and perform all root stuff using sudo, the way Ubuntu works. I am using a shared system, openSUSE 11.3, and notice that the only item that gets logged in su is who su'd. I need more information and sudo + command gets logged to /var/log/messages so I can see who did what and when. How can I get openSUSE 11.3 to work similiar to Ubuntu when it comes to running elevated commands or editing files that a normal user doesn't have rights to?
View 9 Replies View RelatedIn Ubuntu, When I type sudo and hit enter, the new command will appear on the command line, instead of simply executing. This is different from other operating systems I've used, such as older ubuntu's, mac osx and debian. Is there a way of disabling this confirmation and having it simply execute the command?
View 3 Replies View RelatedHow do I disable and change the user password using SSH on a Linux
View 3 Replies View RelatedHow to become a root user without using sudo?So,that i can become super user to edit configuration files in etc directory.
View 1 Replies View Relatedtitle says it all. I know, I know, a recursive chown, what was I thinking. It was late.
I just straight up:
sudo chown -R user /usr/
Now I can't `sudo', error is "authentication failure".
I was trying to add my user to a group and used the command
Code:
sudo usermod -G sambashare_kid dev
which left me with
[code]....
I get this message if i try to use sudo/gksudo. What causes this, how can I solve it? It has been working for years. If i remember correcttly there was a sudo update few days ago, maybe it doesnt work since then, i havent used it in the last few days.
View 9 Replies View RelatedIt's been a few years since I last installed Ubuntu. I searched the forums and can't seem to find the answer. I want to be able to do a "su root" and have root access. I know Ubuntu wants you to do the sudo command, and I know you can really mess things up being root. I know I got this to work before. What do I need to do?
View 3 Replies View RelatedI'm the only user, can login (meaning I know my pass). But cannot Sudo. I'm on Ububtu Studio, the latest release. Doesn't make any sense.
View 2 Replies View RelatedI made a mistake on my friend's Ubuntu system when trying to get hard drive permissions right. I wanted to add a user to a certain group with usermod -G, but without realising I should also use -a, with the result that the user is now not longer in the sudo group. This is the only (regular) user on the system, which means I can not sudo usermod again to get it right. So what to do? The only solution I can think of is using a live disc to restore the group belongings, but I want to know if there's a quicker way. Also, I don't know what more groups the user was in. Is there a history? Or else, what are the default groups?
View 5 Replies View RelatedHow do I add a user to be able to sudo?
View 14 Replies View RelatedI have a problem about user permission, I just destroy my user...So, I create a new one. But I can't have the permission to use "sudo" or to install program... So, I cannot do a lot of thing in my computer. The logical solution is to boot in failsafe mode and access to the root terminal, but, I don't know how to change the permission to allow me to use sudo.
View 5 Replies View RelatedI recently re-installed my U10.04 and this time around, I added a root user and brought the permission levels of my default user to "Desktop User" as well as elevate the root permissions as explained elsewhere in these forums. Everything went fine until I wanted to "sudo" something from the Desktop User account terminal. I use Skype a lot and preferred to use the repos to get it loaded. Into synaptic where it asked me for the password. I entered the password and I was rejected. Ok, maybe I typed it in wrong. Tried again. The third time I checked in an editor to make sure I wasn't in all-caps. Third time OUT!
Switched user to root and there were no problems. Enabled the partner repos, installed Skype, as well as all the other stuff I use to run my home office. I have missed something, I know I have - perhaps a setting somewhere in the user permissions. I don't want to have to switch user every time I have to make changes to the system. Alternatively, if it's better practise to just leave my system as it is for security purposes I'm not running a server, but I'd like to have my system as secure as reasonably possible without elevating my problem to "paranoid security" level.......
I was wondering if someone had a logical reason and therefore complete, hopefully that makes total sense, for why when I install Ubuntu I cannot use the 'sudo' command either with root or user passwords. Even if I try to edit the permissions for sudoers, I still recieve an error message that says access is denied and so as the root user on my pc I don't understand why I can't put my name in the sudoers file or use the sudo command with the correct password.
View 9 Replies View RelatedI was recently messing around learning chgrp commands, and set my (only) user account to a different group. Now whenever I try to sudo a command, I get 'john is not in the sudoers file. This incident will be reported' message.I *seem* to have a root account (one is listed in System->admin->users and groups), but I'm almost certain that the password for it would be one of 3 things, and it's none of them.
View 2 Replies View RelatedI adjusted some settings in the desktop settings folder in KDE. I had only one user account on the machine. Next time I rebooted I could not log into KDE (it kept bombing out). I had to log into the console. Finally I managed to create a new account with useradd but this user cannot sudo
My problem is that my home directory is encrypted, so I need a new user with sudo privileges to delete all the kde files and folders in my original users home directory so that I can start with a new KDE setup (which won�t be a bad thing since I tinkered a lot).
How can I add sudo privileges to the new account (I presume I can do it by logging in with my sudo account in a terminal login?
I have this weird problem after a fresh install of Ubuntu 11.04: I can enter desktop using autologin but if i open a terminal i cant run anything as superuser ried:
sudo -i
sudo su
sudo <command>
gksudo <command>
i get somthing like: error, invalid password etc etc 3 incorrect login attemtps Also if i ALT+F2 or close gnome session i cannot login back with my username, same error notes: 1. the password is right, i did a second install of ubuntu to make sure it was not my mistake 2. groups seems ok, user is in admin groups 3. I have a similar error, same computer but on an old installation that i ve updated since ubuntu 9.04 to 10.04, then 11.04 but. But here if i try the password a couple of times then i get it working.
I have a weird question about the sudoers file. Currently, I am running "Red Hat Enterprise Linux ES release 4 (Nahant Update 8)".
I edited the sudoers file (via visudo) and added the following:
User_Alias RPTS2 = vtmtest
RPTS2 xxxxx = (jboss) /oracle/app/oracle/apps/rptsd/deploy-jboss/deploy_rpts_jboss.sh
The user (vtmtest) issues the following command
sudo /oracle/app/oracle/apps/rptsd/deploy-jboss/deploy_rpts_jboss.sh
and gets this message:
user vtmtest is not allowed to execute '/oracle/app/oracle/apps/rptsd/deploy-jboss/deploy_rpts_jboss.sh' as root on xxxxx
When I look at the log, I see the following:
Jan 25 14:17:57 xxxxx sudo: vtmtest : command not allowed ; TTY=pts/12 ; PWD=/export/home/vtmtest ; USER=root ; COMMAND=/oracle/app/oracle/apps/rptsd/deploy-jboss/deploy_rpts_jboss.sh
1. Why does sudo try to run as the root user, when I have specified in the command to run as jboss?
2. Do I need to specify anything else so that this command can run as the "jboss" user and not "root"?
I want to use root password instead of adding my user to the list of sudoers,In Arch wiki ander Root password:Users can configure sudo to ask for the root password instead of the user password by adding "rootpw" to the Defaults line in /etc/sudoers: but that did not work for me. it asks for root password.Why do I want to do that:
1. I want to do that, I like sudo more than su -c 'some_command'.
2. sudo enables bash completion, su -c does not.
3. I don't want to add my user to sudoers list.
I found many users Suggesting alternatives and lowering the important of my need for this, when I asked this question in anther please.
How can a user be setup to sudo (or su -) without entering a password?
View 1 Replies View RelatedCan a sudo user do everything what a root user can do? I read sometimes expert say "You should run it as root rather than sudo user".
View 14 Replies View RelatedCustomer asked me to create a menu for linux he also asked me to do this: Open like a command like where a user can execute commands...so for this the users have sudo enabled. The code below works OK. But it has an issue when a command is executed but the command does not need sudo
Like for instance
Code:
cd /
sudo: cd: command not found
How can I allow a user to execute all commands when a command does not need sudo
Code:
echo -e "Press Control+C to finish"
#echo -e " "
while true;
do
read whichcmd?"Insert Command: "
sudo $whichcmd
done
I am trying to get a non-root account on one of our servers to run a script with sudo capability. To that end, I went into the /etc/sudoers file, and added the following syntax:
Code:
## Enable the nagios user to run the check_iptables.sh script as root
nagios ALL=NOPASSWD: /usr/local/nrpe/libexec/check_iptables.sh, /sbin/iptables
I restarted the nagios service, and tested the results. The results were the user account still could not run the script due to the user, nagios, not having permission to run the iptables binary.
Is there another step(s) that I need to take in order to get the sudo access available to the user account?
Stumped on this one. I'm trying to set up limited sudo authority on a desktop with some sensitive user data, and as an extra precaution I wanted to configure sudo to use a password other than the user's or the root's. I'm not sure how to do this. From the manual, we have a few options, such as "runaspw" or "targetpw", but none seem quite what I'm looking for.For instance, "runaspw" could be used if I created a user for nothing other than sudo(ing) purposes, but it requires you set "runas_default", which means that said user would have to have authority to execute said commands in the first place. This is workable, but seems like a lot of extra configuration for each specific command that I want to run, as well as creating some issues with simply commands such as "shutdown" or "reboot". Also, "targetpw" can be used in conjunction with a sudo(ing)-only user if I set an alias, but, again, this isn't quite what I am looking for.
Ultimately, what I am really concerned about in this situation are keystroke loggers, so I would prefer to avoid repeated entering the user or root password when performing administrative tasks. Also, I would prefer not having to create a sudo(ing)-only user as mentioned above to prevent a comprimised password resulting in an attacker being able to log into my system.
I wrote a shell script and was able to compile it using SHC. after that i copied it to the /bin folder and tried running it as a normal user, but i keep getting the error " operation not permitted killed "
I tried changing the permissions. but it doesn't work. it only works with sudo. there must be another way. otherwise it won't be linux right?