Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have sudo set to show the usual lecture on its first use by a user. Without thinking, I accidentally triggered its display for a new user as I was setting them up, and now it's been shown, they won't get to see it again.

How does sudo know that a user has invoked it once before? I'd like to reset that so that this user will see the message first time they use it. I don't want to set it so that the lecture appears on every invocation - once is enough - I'd just like sudo to forget that it's already been shown once.

Any ideas how I do that?

share|improve this question
up vote 6 down vote accepted

On Debian, a user's first use of sudo will create a directory under /var/run/sudo/. The directory is named "username", where "username" is the name of the user which ran sudo.

Removing [or renaming] this directory will cause the lecture to be displayed upon next use of sudo, as well as recreate the directory.

For example, the directory for my user account would be /var/run/sudo/jscott.

share|improve this answer
Thank you. On my server, I found the directory at /var/lib/sudo, and removing the user's directory from there did indeed do the trick. – dopiaza Nov 22 '11 at 13:44
Thanks for this! On Fedora 17, I found the directory at /var/db/sudo – Cameron Sep 6 '13 at 1:51
Sounds like Fedora has it right. /var/run is a silly place to put that, since the directory can be cleared at system boot (and since it's on a tmpfs on Fedora, is). – Michael Hampton Sep 6 '13 at 2:38
On RHEL/CentOS 6 and 7, the directory is at /var/db/sudo/, as it is in Fedora. On CentOS 5, it's located in /var/run/sudo. – davidjb Jun 1 at 1:53

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.