LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-14-2006, 08:47 AM   #1
dussel
Member
 
Registered: Dec 2004
Distribution: SuSE 9.X, SuSE 10, SLES 9,RedHat, Feodora Gentoo, Solaris, and more
Posts: 50

Rep: Reputation: 15
Question secure root access with SUDO


Hallo all,

Is there anyone that are expert on SUDO?

I want to let a few administrators get the privilege to run ROOT command with sudo, I have added them to wheels group on my RedHat server and it works fine to run the ROOT commands.

But I want to secure it even more if possible, I want instead of they use their user-password to use sudo, want's I to use RSA key authentication.

Do anyone know if it possible to get sudo to work with key-authentication?

Thanks in advance!

Cheers

Düssel
 
Old 02-15-2006, 04:56 AM   #2
satinet
Senior Member
 
Registered: Feb 2004
Location: England
Distribution: Slackware 11, Sabayon 3.1
Posts: 1,464

Rep: Reputation: 46
its quite easy to set this up in sudo without keys.

why do you want to use keys? to run commands on remote hosts or something?
 
Old 02-15-2006, 05:15 AM   #3
bulliver
Senior Member
 
Registered: Nov 2002
Location: Edmonton AB, Canada
Distribution: Gentoo x86; Gentoo PPC; Gentoo Sparc64; FreeBSD; OS X; Solaris
Posts: 3,731
Blog Entries: 4

Rep: Reputation: 68
Quote:
why do you want to use keys?
As he mentioned, he just wants more security.

The "-a" switch in the sudo manpage states that other authentication methods may be used, but does not say if key-authentication is among them.
 
Old 02-15-2006, 06:30 AM   #4
satinet
Senior Member
 
Registered: Feb 2004
Location: England
Distribution: Slackware 11, Sabayon 3.1
Posts: 1,464

Rep: Reputation: 46
yeah i realise, that but i'm not sure how keys would be appropriate here. what are you exchanging public/private keys between?
 
Old 02-15-2006, 08:26 AM   #5
dussel
Member
 
Registered: Dec 2004
Distribution: SuSE 9.X, SuSE 10, SLES 9,RedHat, Feodora Gentoo, Solaris, and more
Posts: 50

Original Poster
Rep: Reputation: 15
No, I only got the idea of it when I read of a really old open-source project (ssu (secure su)), but it looks like it is not active any longer. It sounded as quite interesting idea they had, so I hoped that SUDO mabe also had implemented a little such possibilities also.

I will test with -a, it is always fun to check out new things.

Thanks for the tip with -a!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Sorry, sudo must be setuid root kurtdriver Fedora 6 10-22-2008 07:47 PM
Give root access to user's display + sudo problems Ephracis Linux - General 12 01-11-2006 11:25 PM
How do I use sudo for my LPA's in a secure manner lucky_dev36 Linux - Security 1 08-31-2005 08:19 PM
Sudo, su and root lesleyb Linux - Security 3 10-18-2004 01:36 PM
Sudo access to particular directories angrybeaver Linux - Software 0 09-23-2004 01:39 AM


All times are GMT -5. The time now is 08:36 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration