sudo is a tool which allows users to run commands as another user (usually the root user)

learn more… | top users | synonyms

16
votes
7answers
9k views

Why do I not have syntax highlighting when I sudo vi <filename>?

I don't understand how to allow syntax highlighting in files I'm editing via vi when using sudo. When I 'sudo vi ' the terminal is only black & white of my terminal settings. In vi if I enter ...
2
votes
5answers
11k views

ssh to multiple hosts and sudo multiple commands

I need to loop through and ssh to multiple hosts and run a series of commands on each. something like: for i in $(jot -w '%02.0f' 14 1) >do ssh user@host$i sudo -i "command1; command2; command3" ...
7
votes
1answer
134 views

su: /bin/bash: Resource temporarily unavailable

Unable to switch user to postgres. Ulimit settings for postgres user is set with reasonable limits. We are not hitting max. No errors in /var/log/messages. Error: BETA -bash-4.2# sudo su - ...
0
votes
0answers
9 views

Pulling Read restricted files from a remote system with rsync and sudo

A remote system generates statistics files every 5 minutes and places them in a certain directory. At any given time there are 1000+ files in that directory. Every 5 minutes I want to copy the ...
0
votes
1answer
25 views

What is causing visudo to fail with: “visudo: can't stat <filename>: Bad file number”?

We use the #include feature in the sudoers file for organizing our sudo rules on a per-application basis. Our sudoers set up looks kinda like this: /etc/sudoers -> #include ...
1
vote
1answer
1k views

winbind separator and group name behavior in getent group, constantly changing

I have a problem that occasionally apprears-dissapears and it drives me nuts. My Debian servers are authenticated against AD and only "linuxadmins" group member can SSH to server and "sudo su". SSH ...
0
votes
3answers
155 views

Disable NOPASSWD sudo access for ubuntu user on an EC2 instance

How can I disable the passwordless sudo access for the default ubuntu user on an EC2 instance? Is it safe to do it?
0
votes
1answer
16 views

how to assign read only permission to sudo group

how can I assign read only permission to all users who are entitled in sudoer file? I want to assign the permissions on log files to those who are in sudoer file.
-1
votes
1answer
24 views

amazon ec2 linux redhat server install unar package

I'm just trying to install unar package for the purpose of uncompress compressed files. What I've tried is sudo yum install unar But it shows "No package unar available". I googled and downloaded ...
0
votes
0answers
22 views

World writable sudoers, no root password set [migrated]

I have Kubuntu 14.04 installed on USB flash drive. Yesterday by accident I did chmod 777 /etc/sudoers. Now I can't set it back to 0440, because I get an error something along the lines of 'File is ...
22
votes
12answers
12k views

How to pass alias through sudo

I have an alias that passes in some parameters to a tool that I use often. Sometimes I run as myself, sometimes under sudo. Unfortunately, of course, sudo doesn't recognise the alias. Does anyone ...
4
votes
3answers
2k views

Enable dtrace without sudo on Mac OS X?

How do I enable users to use dtrace on Mac OS X. I am trying to do the equivalent of strace on Linux, and I don't like running applications with elevated privileges. UPDATE Ok, the best I can tell. ...
1
vote
1answer
504 views

Ruby Enter Your Password to Create App

I have just installed ruby on rails on a Centos server with directadmin following http://blog.ilwilliams.net/installing-rails-3-with-apache-on-centos/ I'm now in a non privileged user account ...
0
votes
2answers
107 views

sudo -i not behaving as expected

Why sudo -i command is not setting the TERM, PATH, HOME, SHELL, LOGNAME, USER and USERNAME on my fresh Ubuntu 12.04.1 LTS as decribed in the manual? # sudo -u johnny -i echo $HOME && echo ...
3
votes
3answers
11k views

nagios nrpe unable to read output

I'm trying to use check_nrpe to check on a remote server, but it's not working and I can't figure out what am I missing... # /usr/lib/nagios/plugins/check_nrpe -H XXX -c check_load -a 6,5,4 8,7,6 ...
-4
votes
6answers
91 views

Sudo immediately after login asks for password [closed]

If you think about it, it is kind of silly that sudo asks for your password even if you just logged into the machine and entered your password. I realize that sudo and /bin/login are two entirely ...
3
votes
2answers
14k views

sudo: no tty present and no askpass program specified (trying to start apachectl)

we are running hudson to monitor a couple of shell jobs. The problem is that hudson runs all jobs as user "hudson". That's ok, except for some special commands that require super user rights, like ...
2
votes
3answers
549 views

Passing variables problem - Bash

I have a following problem: #!/bin/bash NUM=`cat accounts | wc -l`; for i in {1..$NUM} do account=`awk "NR==$i" accounts`; echo -e "\nAccount: $account\n"; sudo ./backup_maildir $account; ...
4
votes
2answers
2k views

Is “sudo su -” considered a bad practice?

Background I know the difference between su -, sudo su -, and sudo <command>: su - - switches user to root, requires the root password sudo su - - switches user to root, requires only the ...
0
votes
3answers
271 views

How to grant user modify only specific protected file by sudo

I need to grant user modify some files by sudo that have only read-only access. For example, I want to grant user 'hosteditor' modify '/etc/hosts' file. I added to sudoers follow line: hosteditor ...
1
vote
1answer
609 views

sudoers restriction only works when using “sudo”, how to restrict regular usage?

I have the following in my sudoers.d/nginx file: deployer ALL=NOPASSWD: /etc/init.d/nginx reload This works if I run the command as sudo: $ sudo /etc/init.d/nginx start [sudo] password for ...
12
votes
4answers
932 views

Giving access of a set of commands to a non-root user without sudo

I want to give non-sudo access to a non-root user on my machine, there is a user dns-manager, his only role is to run all the BIND commands(rndc, dnssec-keygen) etc. Now everytime he has to run a ...
0
votes
1answer
331 views

“Target the specific user you will be using and assign it user id 0/group 0”

I am trying to virtualize an Ubuntu machine using VMWare vCenter Converter, but ran into permissions issues. I followed the instructions of part 1 and 2 on this page but when I got to "For Ubuntu ...
6
votes
5answers
4k views

Every single time I use sudo it hangs before completing

Whether I get prompted for a password or not, it hangs between accepting the authentication and executing what I asked for. In other words sudo ls will hang for about 60 seconds. I'm confused about ...
0
votes
1answer
157 views

Sudo keeps asking for password on / mounted over NFS

I have a diskless server booting Ubuntu 14.04 with / taken from NFS. I use nfs-kernel-server. I have some strange behaviour of sudo and locate. sudo keeps asking for passwords despite the Defaults ...
22
votes
4answers
5k views

vim re-edit as root

I often open a file in vim, make some changes and when it's time to save the file is read-only.. (owned by another user). I'm looking for tips on how I could re-open the file as root and keep my ...
0
votes
1answer
31 views

Granting sudo access for specific command and any flags set (RedHat)

How can you grant sudo access for a specific command with flags. Ex. I requested sudo access for this command below: sudo /usr/bin/su - wassa /usr/was7/profiles/dmgr/bin/wsadmin.sh I can run the ...
2
votes
1answer
155 views

How to trigger sudo's grace period for a given user via Puppet?

I am trying to deploy the Redmine server via Puppet. The installation procedure uses Bundle to install its dependencies. When being installed interactively, sudo prompts user for password when Bundle ...
4
votes
6answers
3k views

Scripts That Need (some) Root Access

I have a general question about system administration scripts that require "some" commands to be executed with root access, and other as a normal non-root user (ie myusername, etc.). I should mention ...
29
votes
4answers
7k views

How can I implement ansible with per-host passwords, securely?

I would like to use ansible to manage a group of existing servers. I have created an ansible_hosts file, and tested successfully (with the -K option) with commands that only target a single host ...
0
votes
1answer
43 views

How do I create files in directory owned by user in same group without sudo?

I have created a user to own website files (drupal) and added that user to www-data, so essentially all files are drupaluser:www-data. I want to go in and put the site in to git but I get permission ...
58
votes
7answers
24k views

Sudo as different user and running screen

Found out today that running screen as a different user that I sudo into won't work! i.e. ssh bob@server # ssh into server as bob sudo su "monitor" - screen (fails) I have a script that ...
24
votes
5answers
2k views

What are the actual benefits of assigning sudo privileges to a user instead of using root?

I am fairly new to server administration, and I have seen a lot of sites recommending to assign sudo privileges to a user created by the root user and giving the root user an insanely long password ...
8
votes
4answers
5k views

Ubuntu : borked my sudoers file, how can I fix it?

I was editing my /etc/sudoers file and saved it but it has a syntax error in there. Now I can't 'sudo vim /etc/sudoers' because sudo thinks the sudoers file is not valid. How can I fix this?
1
vote
0answers
131 views

Sudo error: effective uid is not 0, is sudo installed setuid root? (sudo executable is already root/root 4755)

Running /usr/bin/env sudo /etc/init.d/httpd restart on a godaddy vps works fine from the shell. The same command executed remotely via capistrano generates the following error: sudo: effective uid is ...
3
votes
1answer
274 views

Cron job as root need to sudo to another user [duplicate]

RHEL6 In root's crontab a have: * 21 * * * /root/script.sh In script.sh there is a line: /usr/bin/sudo -u jira bash -c 'cd /opt/jira/bin; ./stop-jira.sh' && echo "Jira Shut Down" >> ...
0
votes
0answers
54 views

Slow sudo response

We have LDAP setup to provide information regarding sudo. The whole system works, but it takes a long time (~10 seconds) for any sudo command to return. For instance if I run strace -f -r -o ...
0
votes
1answer
140 views

sudo and --ask-sudo-pass on CentOS 6.6

I'm running command: [kamil@server.com ]# ansible example.com -a "sudo id" --ask-sudo-pass sudo password: example.com | FAILED >> { "failed": true, "msg": "[sudo] password for kamil: ...
0
votes
1answer
24 views

FreeTDS - sudo uses different protocol version

After a while of fiddling with FreeTDS I got my connection to MSSQL from Sphinx up and running as DSN-less connection. After running indexer index Everything works as expected. But, after ...
0
votes
0answers
37 views

Using placeholders or environment variables in sudoers

Is it possible to use in sudoers rules any kind of placeholders (not just wildcards) or environment variables? What I would like to do is to verify that user (the one sudoing a command) passes as an ...
35
votes
8answers
11k views

How can I run arbitrarily complex command using sudo over ssh?

I have a system that I can only log in to under my username (myuser), but I need to run commands as other user (scriptuser). So far, I have come up with the following to run the commands I need: ssh ...
2
votes
1answer
388 views

Running Ansible task as a specific user

I am trying to run a specific Ansible task as a different user than the one who is running the playbook. My .yml file looks like this: --- - hosts: staging_servers tasks: - name: check ...
0
votes
1answer
95 views

sudo: unable to execute … bad address - what is it and how to fix it?

I have a set of scripts which finishes up client machine deployment after executing a fairly generic NetRestore image. The main script runs under root privileges, and then calls another, "user" ...
0
votes
1answer
43 views

Can't change folder ownership via SSH

For some reason, I have a folder that I cannot read nor change its ownership. If I do a ls command, this is what I get: drwxrwxrwx 4 myusername myusername 4096 Jan 26 20:35 media1 <--- OK ...
2
votes
5answers
2k views

user GPG key not able to be used by SUDO

I created a script that runs duplicity to backup files I have on a VPS,and uses a GPG key that I generated as a user. When I try and run this script as SUDO I get: GPGError: GPG Failed, see log ...
1
vote
4answers
2k views

Editing with Winscp

I would like to edit files in my /etc from winscp. I have administrator privileges on this computer, How can i edit files and save them from Winscp in folders that require sudo be written before any ...
5
votes
2answers
462 views

Is there a way to allow command in sudo based on the current working directory?

I want sudo to allow me to run a command when my current working directory is, for example, /tmp. Example usage is removing files from /tmp directory, so I am in /tmp ($PWD of shell == /tmp), then I ...
11
votes
6answers
8k views

How can I execute a bash function with sudo?

I have a bash function defined in a global bashrc, which requires root privileges to work. How can I run it with sudo, e.g. sudo myfunction. By default it gives an error: sudo: myfunction: command ...
0
votes
0answers
40 views

Can I use serverspec on a remote system without requiring root or sudo access on that system?

Main thing I am trying to do is to run the tests from an unprivileged user (a gui runs these tests) without giving away the keys to the castle if this user gets compromised. Most of the tests ...
-1
votes
2answers
609 views

How to set “sudoers” in nsswitch.conf on Solaris-11

I am doing this on Solaris 11. When i open '/etc/nsswitch.conf' i see this - ... sudoers: files ... I would like to change this to - ... sudoers: files ldap ... I tried editing the file ...