separate sudo and user password

drkarthik · 06-21-2016, 12:02 PM

hi everyone,
I am using linux mint cinnamon 18 beta.
I want to know if this can be done.
Can i have a separate sudo password different from the user password so that even if I give my login password for my username to others they will not be able to use it to perform root actions?
this is possible in debian but i stopped using it as I have grown familiar with mint.
thank you!

lazydog · 06-21-2016, 12:14 PM

I would question why you are giving out your login information to others? If they require access then they should have their own login.

To answer your question I believe it is yes. Just google for it there is a lot out there

drkarthik · 06-21-2016, 12:34 PM

Quote:

Originally Posted by lazydog

I would question why you are giving out your login information to others? If they require access then they should have their own login.

To answer your question I believe it is yes. Just google for it there is a lot out there

thanks for the reply,
i give out the login information to others because it is a home computer and more than 4 to 5 people use it.
i just felt like leaving the login information open and at the same time restricting them to perform any root operations and break the installation. All my family members have just started using linux (previously windows).

yes i googled for this but could not find an easy method for mint.
can you please post some links or redirect me to a reliable solution.
thank you!!

TB0ne · 06-21-2016, 01:23 PM

Quote:

Originally Posted by drkarthik

thanks for the reply,
i give out the login information to others because it is a home computer and more than 4 to 5 people use it.
i just felt like leaving the login information open and at the same time restricting them to perform any root operations and break the installation. All my family members have just started using linux (previously windows).

Then start using Linux CORRECTLY, and just create user ID's for everyone...why is this a problem? This is the same thing as creating a separate user under Windows...everyone has their own home directory, settings, etc. Which is what you WANT if more than one person is using the system.

Also, if they've just started, it is ABSOLUTELY A HORRIBLE IDEA to give someone, with NO Linux experience, the ability to be able to cause irreparable damage to your system. If they don't know what they're doing, you *DO NOT* want them to have sudo/root access, at all, period, ever. You say you've used Debian in the past, so you should already know about the very basics of system-security.

Quote:

yes i googled for this but could not find an easy method for mint. can you please post some links me to a reliable solution.

Since you looked, and didn't find something 'easy', then tell us what you DID find...we aren't going to hand you links and look things up for you.

notKlaatu · 06-21-2016, 01:50 PM

I wouldn't do what you are trying to do (if nothing else, I'd create a guest-user that people could use to log in with, so as to protect your own personal files from accidental harm) but it's your computer.

This has nothing to do with Mint or Debian or any distro. The thing that `sudo` does, according to its own man page:

Code:

$ whatis sudo
sudo (8)             - execute a command as another user

So you can definitely use different passwords to initiate sudo. Two easy steps:

1. Create a user. For instance:

Code:

$ sudo useradd -m -g wheel timmy
$ sudo passwd timmy 
password123

2. Tell little Timmy to use sudo this way:

Code:

$ sudo -u timmy "echo `whoami`"
  <enters: password123>
timmy

Turbocapitalist · 06-21-2016, 02:17 PM

I agree with the advice above. It is best to have accounts for the different users, or else a guest account. Failing that, if you do stick with your current arrangement, which is not advised, then you should make a second account and give that administrative privileges. Once the second account is verified to work as administrator, use it to demote the first account so that it is not administrator any longer. But, again, adding a guest account or accounts for the other users is the way to go if you can.

drkarthik · 06-21-2016, 02:21 PM

Quote:

Originally Posted by notKlaatu

I wouldn't do what you are trying to do (if nothing else, I'd create a guest-user that people could use to log in with, so as to protect your own personal files from accidental harm) but it's your computer.

This has nothing to do with Mint or Debian or any distro. The thing that `sudo` does, according to its own man page:

Code:

$ whatis sudo
sudo (8)             - execute a command as another user

So you can definitely use different passwords to initiate sudo. Two easy steps:

1. Create a user. For instance:

Code:

$ sudo useradd -m -g wheel timmy
$ sudo passwd timmy 
password123

2. Tell little Timmy to use sudo this way:

Code:

$ sudo -u timmy "echo $whoami"
  <enters: password123>
timmy

thank you..

drkarthik · 06-21-2016, 02:21 PM

Quote:

Originally Posted by Turbocapitalist

I agree with the advice above. It is best to have accounts for the different users, or else a guest account. Failing that, if you do stick with your current arrangement, which is not advised, then you should make a second account and give that administrative privileges. Once the second account is verified to work as administrator, use it to demote the first account so that it is not administrator any longer. But, again, adding a guest account or accounts for the other users is the way to go if you can.

thank you...

jamison20000e · 06-21-2016, 03:00 PM

I love guest modes for my nephews (12 & 5.)