sudoers: how to disable requiretty per user

Question

I don't want to comment out the line in /etc/sudoers:

Defaults    requiretty

Instead, I only want a certain user not to require a tty. How can this be done?

Dennis Williamson · Accepted Answer · 2010-02-09 13:02:49Z

98

You said that you want one particular user to not require a tty. That's the default behavior. Nevertheless, you can explicitly set that like this:

Defaults:username !requiretty

If you want everyone else to require a tty, then you'll have to uncommment the line.

answered Feb 9, 2010 at 13:02

Dennis Williamson

62.2k16 gold badges116 silver badges151 bronze badges

13

Btw., requiretty is active per default on RHEL5. Good to know its not like that in other distributions.
– user27451
Feb 13, 2010 at 14:11
This one might help someone. serverfault.com/questions/72708/execute-su-c-over-ssh
– Senthil Kumar
Mar 8, 2012 at 10:49

Add a comment |

Nomen Nescio · Accepted Answer · 2017-09-12 23:22:38Z

6

RedHat now recommends removing 'Defaults requiretty', conforming with the source code defaults. In Security Advisory RHSA-2016:2593, Redhat patched /etc/sudoers, removing line 'Defaults requiretty'

Also, per user requiretty exceptions DO NOT WORK for RHEL/CENTOS 7 (sudo 1.8.6p7)

answered Sep 12, 2017 at 23:22

Nomen Nescio

1711 silver badge2 bronze badges

This is really great info but does not technically answer the question.
– HarlemSquirrel
Oct 2, 2017 at 15:24
2

Do you have a link to a ticket about per user defaults not working on RHEL/CENTOS 7 ? Or maybe a link to release notes saying this has been fixed post 1.8.6p7 ? I'm not seeing anything about it under sudo.ws/stable.html
– pwan
Oct 4, 2017 at 19:17

Add a comment |

2 Answers 2