{"id":2194,"date":"2015-08-07T14:57:17","date_gmt":"2015-08-07T14:57:17","guid":{"rendered":"http:\/\/blog.designed79.co.uk\/?p=2194"},"modified":"2015-08-07T14:57:17","modified_gmt":"2015-08-07T14:57:17","slug":"sudo-file-explained","status":"publish","type":"post","link":"https:\/\/blog.designed79.co.uk\/?p=2194","title":{"rendered":"Sudo file explained"},"content":{"rendered":"

In the following\u00a0<\/p>\n

sudo<\/div><\/div>\n

\u00a0entry:<\/p>\n

\n\n
superadm  ALL=(ALL)   ALL<\/div><\/div>\n\n<\/pre>\n
there are four fields:<\/p>\n
    \n
  • The first one specifies a user that will be granted privileges for some command(s).<\/li>\n
  • The second one is rarely used. It’s a list of hostnames on which this sudo entry will be effective. On standard setups only one host is relevant (localhost) so this field is usually left as\u00a0\n
    ALL<\/div><\/div>\n
    .<\/li>\n
  • The\u00a0fourth<\/em>\u00a0field is the list of commands\u00a0\n
    superadm<\/div><\/div>\n
    \u00a0will be able to run with elevated privileges.\u00a0<\/p>\n
    ALL<\/div><\/div>\n
    \u00a0means all commands. Otherwise use a comma-separated list of commands.<\/li>\n
  • The third field (the one written\u00a0\n
    (\u2026)<\/div><\/div>\n
    \u00a0that is optional) specifies which users (and groups) the\u00a0<\/p>\n
    superadm<\/div><\/div>\n
    \u00a0user will be able to run the following commands as.\u00a0<\/p>\n
    ALL<\/div><\/div>\n
    \u00a0means they can chose anything (unrestricted). It this field is omitted, it means the same as\u00a0<\/p>\n
    (root)<\/div><\/div>\n
    .<\/li>\n<\/ul>\n
    Example:<\/strong><\/p>\n
    \n\n
    alan   ALL = (root, bin : operator, system) \/bin\/ls, \/bin\/kill<\/div><\/div>\n\n<\/pre>\n
    Here,\u00a0<\/p>\n
    alan<\/div><\/div>\n
    \u00a0is allowed to run the two commands\u00a0<\/p>\n
    \/bin\/ls<\/div><\/div>\n
    \u00a0and\u00a0<\/p>\n
    \/bin\/kill<\/div><\/div>\n
    \u00a0as\u00a0<\/p>\n
    root<\/div><\/div>\n
    \u00a0(or\u00a0<\/p>\n
    bin<\/div><\/div>\n
    ), possibly with additional\u00a0<\/p>\n
    operator<\/div><\/div>\n
    \u00a0or\u00a0<\/p>\n
    system<\/div><\/div>\n
    \u00a0groups privileges.<\/p>\n
    So\u00a0<\/p>\n
    alan<\/div><\/div>\n
    \u00a0may chose to run\u00a0<\/p>\n
    ls<\/div><\/div>\n
    \u00a0as the\u00a0<\/p>\n
    bin<\/div><\/div>\n
    \u00a0user and with\u00a0<\/p>\n
    operator<\/div><\/div>\n
    ‘s group privileges like this:<\/p>\n
    \n\n
    sudo -u bin -g operator \/bin\/ls \/whatever\/directory<\/div><\/div>\n\n<\/pre>\n
    If\u00a0<\/p>\n
    -u<\/div><\/div>\n
    \u00a0is omitted, it’s the same as\u00a0<\/p>\n
    -u root<\/div><\/div>\n
    . If\u00a0<\/p>\n
    -g<\/div><\/div>\n
    \u00a0is omitted, no additional group privileges are granted.<\/p>\n","protected":false},"excerpt":{"rendered":"
    In the following\u00a0 sudo \u00a0entry: superadm  ALL=(ALL)   ALL there are four fields: The first one specifies a user that will be […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2194","post","type-post","status-publish","format-standard","hentry","category-info-on-tech"],"_links":{"self":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2194"}],"version-history":[{"count":0,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2194\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.designed79.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}