30 Aug
2012
30 Aug
'12
11:53 p.m.
On 31/08/12 09:48, Kevin Chadwick wrote:
Cmnd_Alias EDITS = /usr/bin/vim, /usr/bin/nano, /usr/bin/cat, /usr/bin/vi Cmnd_Alias ARCHLINUX = /usr/sbin/gparted, /usr/bin/pacman, /usr/bin/pacman-color
root ALL = (ALL) ALL USER_NAME ALL = (ALL) ALL, NOPASSWD: WHEELER, NOPASSWD: PROCESSES, NOPASSWD: ARCHLINUX, NOPASSWD: EDITS
The arch wiki docs are usually very good but the sudo page is dangerous.
The offered configs suggest adding editors to sudo when sudoedit should only be added and only to a set file otherwise sudo is basically just su and without a password in the example so suid all due to the user being able to edit sudoers or escape the editor.
It is a wiki. Edit it...