This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
linux:sudo [2022/09/27 11:54] manu |
linux:sudo [2025/02/25 13:27] (current) manu [sudo howto] |
||
---|---|---|---|
Line 20: | Line 20: | ||
# sudo -u bin -g operator /bin/ls /whatever/directory | # sudo -u bin -g operator /bin/ls /whatever/directory | ||
- | <cli> | + | <cli prompt='>'> |
[root@aix001]/etc/sudoers.d> cat zabbix | [root@aix001]/etc/sudoers.d> cat zabbix | ||
%AIXUSERS ALL=(root) NOPASSWD: /usr/bin/vi /etc/zabbix/* | %AIXUSERS ALL=(root) NOPASSWD: /usr/bin/vi /etc/zabbix/* | ||
Line 33: | Line 33: | ||
</cli> | </cli> | ||
- | ====== sudo -i vs sudo su ===== | + | Change sudo default timeout (5 min): |
+ | <cli prompt='>'> | ||
+ | root@nimprod /root> sudo -V | grep -i time | ||
+ | Lecture user the first time they run sudo | ||
+ | Authentication timestamp timeout: 120.0 minutes | ||
+ | Password prompt timeout: 5.0 minutes | ||
+ | Path to authentication timestamp dir: /var/run/sudo/ts | ||
+ | Type of authentication timestamp record: tty | ||
+ | Sudo log server timeout in seconds: 30 | ||
+ | |||
+ | root@nimprod /root> grep -i time /etc/sudoers | ||
+ | Defaults timestamp_timeout=120 | ||
+ | </cli> | ||
+ | |||
+ | ====== "sudo -i" VS "sudo su" ===== | ||
==== sudo su ==== | ==== sudo su ==== | ||
Line 68: | Line 82: | ||
This command is best used when the user wants to switch over to root but keep the same shell environment. | This command is best used when the user wants to switch over to root but keep the same shell environment. | ||
+ | |||
+ | ===== Run command su/sudo with nologin ===== | ||
+ | |||
+ | As user with nologin shell can't be reached with "su - user", but you can use instead the command | ||
+ | runuser | ||
+ | |||
+ |