On 18/06/10 00:13, Dan McGee wrote:
On Thu, Jun 17, 2010 at 8:49 AM, Andres P
wrote: On Thu, Jun 17, 2010 at 9:17 AM, Allan McRae
wrote: On 17/06/10 23:35, Andres P wrote:
On Thu, Jun 17, 2010 at 9:04 AM, Allan McRae
wrote: Um... no it does not... sudo -l does not ask for a password even with timestamp_timeout=0.
Allan
Yes it does... man sudoers
Defaults timestamp_timeout=0, passwd_timeout=0
sudo -l /bin/true&& sudo /bin/true
will ask you twice... come on now :/
allan@mugen ~
sudo -l Matching Defaults entries for allan on this host: timestamp_timeout=0, passwd_timeout=0
User allan may run the following commands on this host: (ALL) ALL
allan@mugen ~
sudo -l /bin/true&& sudo /bin/true /bin/true Password:
allan@mugen ~
I count one password request...
I advice that you create a new user with a fresh leash.
I'm using sudo 1.7.2p7-1 and could go through the trouble of naggging folks to post their sudo output just to get this fixed ;)
My sudoers verbatim: # Defaults specification Defaults rootpw, timestamp_timeout=0, passwd_timeout=0
# User privilege specification root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands %wheel ALL=(ALL) ALL
Nothing exotic... the only relevant setting is timestamp
Dude, the ball is in your court to prove this, I can't get it to do anything resembling asking for my password twice. I added the two options to my sudoers file and look at hte following sequence. Note that the only time it asks for my password is on the actual execution of the command, not on the '-l' usage.
dmcgee@galway ~/projects/pacman (master) $ sudo -l /bin/true /bin/true
dmcgee@galway ~/projects/pacman (master) $ sudo /bin/true Password:
dmcgee@galway ~/projects/pacman (master) $ sudo /bin/true Password:
dmcgee@galway ~/projects/pacman (master) $ sudo -l /bin/true /bin/true
I think I have found the issue here. We obviously have a NOPASSWD entry in our sudoers file so "sudo -l" does not require a password. So the bug is confirmed. However the fix is not fully functional as if I have sudo installed but can not use it for pacman, then I can no longer fall back to using "su -c". I'd choose excess password typing over functionality loss. Allan