somewhat OT: sudo question

Ranjan Maitra maitra at iastate.edu
Sat Sep 11 01:14:45 UTC 2010


On Thu, 9 Sep 2010 23:31:49 -0500 JD <jd1008 at gmail.com> wrote:

> 
> 
> On 09/09/2010 09:25 PM, JD wrote:
> >
> >
> > On 09/09/2010 09:09 PM, Gregory Hosler wrote:
> >> Granting administrator privileges is not done gratuitously. Having 2 
> >> entries,
> >> for 2 different types of requirements is totally sane.
> >>
> >> Having said that, the sudoers manpage gives an example with one line 
> >> combining both.
> >
> > Would this do it?
> >
> > maitra    ALL=(ALL)      NOPASSWD: 
> > /usr/sbin/pm-hibernate,/usr/sbin/pm-suspend , PASSWD: ALL
> That generated a syntax error.
> I modified it to
> maitra    ALL=(ALL)      
> NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend , PASSWD:ALL
> 
> i.e., removed the space after the colon
> and that took care of it.
> 
> Rajan, try it and let us know.


No, this does not work, but this one does:

maitra	ALL=(ALL) PASSWD:ALL, NOPASSWD:/usr/sbin/pm-hibernate,/usr/sbin/pm-suspend

Basically, I believe that we need the PASSWD to be before the NOPASSWD case, since otherwise ALL trumps these commands.

Ranjan




More information about the users mailing list