Difference between revisions of "Package:Sudo"

From Funtoo
Jump to navigation Jump to search
m (updated to user sudo lock root to ensure that the user's got sudo)
Line 32: Line 32:
To better secure a system, one may desire to disable root logins by password.
To better secure a system, one may desire to disable root logins by password.


{{console|body= ###i## passwd --lock root}}
{{console|body= $##i## sudo passwd -ld root}}


to access root:
to access root:

Revision as of 00:22, January 12, 2015

Sudo

   Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.


sudo allows privilege escalation for non root users to perform restricted actions while in a locked down user environment.

Emerge

root # emerge sudo

Configuration

Passwordless

The sudo configuration file is located @ /etc/sudoers.

user $ su -c 'nano /etc/sudoers'

Remove the # in the line....

%wheel ALL=(ALL) NOPASSWD: ALL

Add your user to the wheel group to enable sudo:

user $ su -c 'gpasswd -a $USER wheel'

Either log out, and in again or restart:

user $ su -c 'shutdown -r now'
Disabling Root Access By Password

To better secure a system, one may desire to disable root logins by password.

user $ sudo passwd -ld root

to access root:

user $ sudo su

Root can also be accessed by logging in via ssh keys, or as a restricted user then sudo su as above.

Bash Completion

Users that want bash completion with sudo need to run this once.

user $ echo "complete -cf sudo" >> $HOME/.bashrc