sudo

RGummi · 10-07-2006, 09:03 AM

Hello,

how must I modify my sudoers so I can start/stop the cron job without typing a password?

Here my sudoers file:

Code:

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# prevent environment variables from influencing programs in an
# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158,
# CVE-2006-0151)
Defaults always_set_home
Defaults env_reset

# In the default (unconfigured) configuration, sudo asks for the root password.
# This allows use of an ordinary user account for administration of a freshly
# installed system. When configuring sudo, delete the two
# following lines:
# Defaults targetpw    # ask for the password of the target user i.e. root
# ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

# Runas alias specification

# User privilege specification
root	ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel	ALL=(ALL)	ALL

# Same thing without a password
# %wheel	ALL=(ALL)	NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now

rgummi localhost=NOPASSWD: /etc/init.d/cron

This works but I must enter my user password! It seems that NOPASSWD: is useless!
Ok I can use the -S option give the password in my script, but I think there must be an other way.

Thanks

TruongAn · 10-07-2006, 09:38 AM

Sudo without typing password is a security hole, I personally don't think sudo can be configured to allowed

frob23 · 10-07-2006, 12:33 PM

Code:

rgummi localhost = NOPASSWD: /etc/init.d/cron

You had a typo in the file. I am pretty sure that the space is important here.

If that is not the problem then something else is happening because I have similar rules that work just fine.

RGummi · 10-08-2006, 03:33 AM

Hi,

now I have tried

rgummi ALL=NOPASSWD: /etc/init.d/cron

with a tab between rgumi and ALL, this works! But it does not work with localhost instead of ALL.
By the way is there a good documentation available with examples? The man pages are too theoretically!

RGummi