Why does "joe ALL=NOPASSWD: ALL" in sudoers not work?

lumix · 06-19-2008, 08:18 AM

if ( "ray rushmore = NOPASSWD: /bin/kill" ) //according to man-page
then { so should the example in the subject line. } //according to reason

//no?

bigrigdriver · 06-19-2008, 08:42 AM

The example you cite from the man page gives ray rushmore only one command: /bin/kill. It doesn't give him ALL commands.

I believe this is what you are looking for:

Code:

joe    ALL = (root) NOPASSWD: ALL

Agrouf · 06-19-2008, 09:28 AM

sudoers file is read from top to bottom and a rule can override another.
A common mistake is to place rules that overwrite each other.
If you want that to work for sure, make sure it is the very last command.

lumix · 06-19-2008, 12:04 PM

BigRig:

Note subject line, and use of "joe" as an example from which to extrapolate.

Agrouf:

You are correct, sir. Putting at bottom did the trick. Just like a firewall (some, anyway).

Thanks to all for the replies.