[CentOS] sudoers

Wed Jun 10 23:36:23 UTC 2015
Valeri Galtsev <galtsev at kicp.uchicago.edu>

On Wed, June 10, 2015 6:08 pm, Chris Olson wrote:
> My experience with RHEL and CentOS is quite limited, andwould classify me
> as novice.  I have been running CentOS 6for a little over a year and
> recently brought up a CentOS 7system as a virtual machine under Windows 7.
> One of the first things I usually do after installation isedit the
> /etc/sudoers file using visudo to give a specificuser or specific users
> privileges as indicated in the fileexcerpt below. The visudo editor issued
> no error messageswhen creating the line for sarah.
> ##    user    MACHINE=COMMANDS
> ##
> ## The COMMANDS section may have other options added to it.
> ##
> ## Allow root to run any commands anywhere
> root  ALL=(ALL)   ALL
> sarah ALL=(ALL)  NOPASSWD: ALL

Wow, regular user getting root without password! This looks scary! Did we
have a whole chapter about it in system administration books?

Valeri

> On our CentOS 6 systems, the NOPASSWD option works as itis intended to
> work.  No password prompt is presented for
> commands such as "sudo cat /etc/sudoers".  On CentOS 7,the NOPASSWD
> option does not seem to work, and a promptfor sarah's password is always
> issued.
>
> Can someone help solve this CentOS 7 mystery?
> Thank you and best regards.
>
>
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++