Project

General

Profile

Actions

Bug #14381

open

Directive Sudoers allow both passwordless sudo and all commands.

Added by Matthew Frost over 5 years ago. Updated 5 months ago.

Status:
New
Priority:
N/A
Category:
Techniques
Target version:
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
User visibility:
Getting started - demo | first install | Technique editor and level 1 Techniques
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

Hello Rudder,

During my testing yesterday we attempted to allow a user on our staging server to execute passwordless sudo and all commands, but we found that when you enable the following options in the directive:

  • Allow the entity to execute the given commands without entering his password (true)
  • Allow the entity to execute all commands (true)
  • Commands allowed to this entity - Optional (EMPTY)

The sudeors file results in the following:

#includedir /etc/sudoers.d
# begin_section_user
user    ALL=(ALL) ALL

This does allow the user to execute sudo commands but prompts for a password our goal would be to allow all sudo commands on staging without entering a password.

Thank you!

Actions

Also available in: Atom PDF