25

I know how to create a command which a given user can execute via sudo. I have a given command I want to allow any user to be able to execute via sudo without entering a password. What would I put in my /etc/sudoers file in order to make that happen?

  • Thank you for asking this question. I looked in man sudoers once and did not find the answer. I looked into man sudoers a second time, more carefully. Still I failed, TMI! Then, thanks to the answers here I grepped man sudoers and found why this is working. Looks like you first need to know how to do it before you can understand man sudoers. Sigh! – Tino Apr 19 '18 at 14:07
24

A section like this in your sudoers is probably what you want.

Cmnd_Alias NAMEOFTHIS=/usr/bin/program
ALL ALL=NOPASSWD: NAMEOFTHIS
  • Doesn't that grant access just to user username? Is there a wildcard I can use instead? I want any authenticated user to be able to execute the command. – Josh Sep 23 '10 at 19:07
  • Then use a group they are all members of. – Broam Sep 23 '10 at 19:10
  • Thanks! I swear I tried that but I forgot a space, so it wasn't working! – Josh Sep 23 '10 at 19:10
  • 1
    If it's not all users, I'd add a group simply because this is membership of something you wish to track - who can sudo this way. – Broam Sep 27 '10 at 15:45
  • 1
    If you really don't want to add a group (beats me why not) and still need individual users, use User_Alias SOMEUSERS = user1, user2. – Brett Ryan Aug 2 '12 at 5:37
18

You might consider the SUID bit. Certain programs require root privileges and use the SUID bit, such as passwd.

If sudo is the better choice for you, you could use:

ALL ALL=NOPASSWD: /path/to/command
  • 3
    It's a shell script which restarts a local caching nameserver... so SUID won't work in this case, right? – Josh Sep 23 '10 at 19:05
  • Zoredache beat me in the time it took for me to test my recommended solution. =) – Warner Sep 23 '10 at 19:12
  • While he was simultaneously harassing me in chat for posting such an easy question, no less! – Josh Sep 23 '10 at 19:17
  • 1
    @Josh:then don't post easy questions :-) – Bart Silverstrim Sep 24 '10 at 13:25
  • 2
    @Josh: Sounds like a neat feature, actually. Multiharassitasking. – Bart Silverstrim Sep 24 '10 at 13:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.