26

I know how to create a command which a given user can execute via sudo. I have a given command I want to allow any user to be able to execute via sudo without entering a password. What would I put in my /etc/sudoers file in order to make that happen?

1
  • Thank you for asking this question. I looked in man sudoers once and did not find the answer. I looked into man sudoers a second time, more carefully. Still I failed, TMI! Then, thanks to the answers here I grepped man sudoers and found why this is working. Looks like you first need to know how to do it before you can understand man sudoers. Sigh!
    – Tino
    Apr 19, 2018 at 14:07

2 Answers 2

24

A section like this in your sudoers is probably what you want.

Cmnd_Alias NAMEOFTHIS=/usr/bin/program
ALL ALL=NOPASSWD: NAMEOFTHIS
6
  • Doesn't that grant access just to user username? Is there a wildcard I can use instead? I want any authenticated user to be able to execute the command.
    – Josh
    Sep 23, 2010 at 19:07
  • Then use a group they are all members of.
    – Broam
    Sep 23, 2010 at 19:10
  • Thanks! I swear I tried that but I forgot a space, so it wasn't working!
    – Josh
    Sep 23, 2010 at 19:10
  • 1
    If it's not all users, I'd add a group simply because this is membership of something you wish to track - who can sudo this way.
    – Broam
    Sep 27, 2010 at 15:45
  • 1
    If you really don't want to add a group (beats me why not) and still need individual users, use User_Alias SOMEUSERS = user1, user2.
    – Brett Ryan
    Aug 2, 2012 at 5:37
19

You might consider the SUID bit. Certain programs require root privileges and use the SUID bit, such as passwd.

If sudo is the better choice for you, you could use:

ALL ALL=NOPASSWD: /path/to/command
7
  • 4
    It's a shell script which restarts a local caching nameserver... so SUID won't work in this case, right?
    – Josh
    Sep 23, 2010 at 19:05
  • Zoredache beat me in the time it took for me to test my recommended solution. =)
    – Warner
    Sep 23, 2010 at 19:12
  • While he was simultaneously harassing me in chat for posting such an easy question, no less!
    – Josh
    Sep 23, 2010 at 19:17
  • 1
    @Josh:then don't post easy questions :-) Sep 24, 2010 at 13:25
  • 2
    @Josh: Sounds like a neat feature, actually. Multiharassitasking. Sep 24, 2010 at 13:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.