Comments on: Sudo Voodoo http://www.linux-mag.com/id/4824/ Open Source, Open Standards Sat, 05 Oct 2013 13:48:18 +0000 hourly 1 http://wordpress.org/?v=3.1 By: bugmenot http://www.linux-mag.com/id/4824/#comment-5002 bugmenot Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5002 It's pronounced sue-doh, not soodoo. It’s pronounced sue-doh, not soodoo.

]]> By: jacquelinew http://www.linux-mag.com/id/4824/#comment-5003 jacquelinew Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5003 It's pronounced both ways, and that's ok. It’s pronounced both ways, and that’s ok.

]]> By: jeff@amaonline.com http://www.linux-mag.com/id/4824/#comment-5004 jeff@amaonline.com Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5004 Q) How do you pronounce `sudo'?<br /> A) The official pronunciation is soo-doo (for su "do"). However, an alternate pronunciation, a homophone of "pseudo", is also common.<br /> <br /> from: http://www.gratisoft.us/sudo/troubleshooting.html Q) How do you pronounce `sudo’?
A) The official pronunciation is soo-doo (for su “do”). However, an alternate pronunciation, a homophone of “pseudo”, is also common.

from: http://www.gratisoft.us/sudo/troubleshooting.html

]]> By: pmpope http://www.linux-mag.com/id/4824/#comment-5005 pmpope Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5005 i like suelue i like suelue

]]> By: pmpope http://www.linux-mag.com/id/4824/#comment-5006 pmpope Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5006 soodoo, soda, sodough, sewdo, samo-freakin'-whamo, they all sound good but who's gonna get you there w/o going root? only SUDO! soodoo, soda, sodough, sewdo, samo-freakin’-whamo, they all sound good but who’s gonna get you there w/o going root? only SUDO!

]]> By: joachimd http://www.linux-mag.com/id/4824/#comment-5007 joachimd Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5007 I like to use sudo but can find it annoying when it feels like it is always asking me for my password. To make this happen less frequently I increased the time after which it will ask for the password again to a reasonable time (remember too long would also be less safe).. This is done in /etc/sudoers by adjust the flag 'timestamp_timeout'. I like to use sudo but can find it annoying when it feels like it is always asking me for my password. To make this happen less frequently I increased the time after which it will ask for the password again to a reasonable time (remember too long would also be less safe).. This is done in /etc/sudoers by adjust the flag ‘timestamp_timeout’.

]]> By: ch1pman http://www.linux-mag.com/id/4824/#comment-5008 ch1pman Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5008 SUPER USER DO. doh! SUPER USER DO. doh!

]]> By: hrcastro http://www.linux-mag.com/id/4824/#comment-5009 hrcastro Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5009 What would be the best solution (with sudo) to provide file editing capabilities to regular users without giving "sudo vi /path/file"? (Because you could run a shell as root from vi). thx What would be the best solution (with sudo) to provide file editing capabilities to regular users without giving “sudo vi /path/file”? (Because you could run a shell as root from vi). thx

]]> By: jahoward http://www.linux-mag.com/id/4824/#comment-5010 jahoward Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5010 no one requires their sys admins to use sudo, correct ? Only users who need to perform a specific task.<br /> <br /> How do you track what your sys admins are doing ? no one requires their sys admins to use sudo, correct ? Only users who need to perform a specific task.

How do you track what your sys admins are doing ?

]]> By: lrunkle911 http://www.linux-mag.com/id/4824/#comment-5011 lrunkle911 Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5011 "no one requires their sys admins to use sudo, correct ? Only users who need to perform a specific task.<br /> <br /> How do you track what your sys admins are doing ? "<br /> <br /> Where I work, even I (sysadmin) use sudo. I could get around it easily enough but if I am going to be having everyone else use it then I need to lead by example and use it to. “no one requires their sys admins to use sudo, correct ? Only users who need to perform a specific task.

How do you track what your sys admins are doing ? “

Where I work, even I (sysadmin) use sudo. I could get around it easily enough but if I am going to be having everyone else use it then I need to lead by example and use it to.

]]> By: bobcatos http://www.linux-mag.com/id/4824/#comment-5012 bobcatos Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5012 To prevent a user from shelling out with vi (which is vim on my machines), use the "-Z" option or "rvim" which is the same thing. If your vi is different, run "man vi" to find out how to make it restricted. To prevent a user from shelling out with vi (which is vim on my machines), use the “-Z” option or “rvim” which is the same thing. If your vi is different, run “man vi” to find out how to make it restricted.

]]> By: csbeltran http://www.linux-mag.com/id/4824/#comment-5013 csbeltran Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5013 How can this be implemented in a NIS environment?<br /> I want to create a group of administrators who can have certain sudo priveleges distributed to all of the systems in my NIS domain. How can this be implemented in a NIS environment?
I want to create a group of administrators who can have certain sudo priveleges distributed to all of the systems in my NIS domain.

]]> By: jwilleke http://www.linux-mag.com/id/4824/#comment-5014 jwilleke Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5014 There is an LDAP Implementation for sudo.<br /> -jim There is an LDAP Implementation for sudo.
-jim

]]> By: jwilleke http://www.linux-mag.com/id/4824/#comment-5015 jwilleke Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5015 LDAP sudo http://www.gratisoft.us/sudo/readme_ldap.html<br /> <br /> sudo home page:<br /> http://www.gratisoft.us/sudo/ LDAP sudo http://www.gratisoft.us/sudo/readme_ldap.html

sudo home page:
http://www.gratisoft.us/sudo/

]]> By: khess http://www.linux-mag.com/id/4824/#comment-5016 khess Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5016 Officially it is soo doo, because you are <em>do</em>ing something as another user. I pronounce it both ways but soo doo more often than before. People understand it both ways though. Kind of like SQL. Do you say it ess-cue-ell or sequel? Officially it is soo doo, because you are doing something as another user. I pronounce it both ways but soo doo more often than before. People understand it both ways though. Kind of like SQL. Do you say it ess-cue-ell or sequel?

]]> By: azizisma http://www.linux-mag.com/id/4824/#comment-5017 azizisma Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5017 thanks for this article thanks for this article

]]> By: mohd_feroz2003linux http://www.linux-mag.com/id/4824/#comment-5018 mohd_feroz2003linux Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5018 cool when if u have more inf on this plz mail me.. i'm a begginner cool when if u have more inf on this plz mail me.. i’m a begginner

]]> By: setchele http://www.linux-mag.com/id/4824/#comment-5019 setchele Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5019 It's not just for root access though. You can use it to grant account access from one user to another. For example, logging in as user1 and then entering "sudo -i -u user2" gives you an interactive session as user2 without having to know user2's password (assuming appropriate sudoers configuration). So for example if user2 is a production account running say the accounting system and user1, a support person, needs to login to the production accounting account they can do so without knowing the production account password and their access is logged (i.e., user user1 logged in as user2 at ). <br /> One issue I've encountered with sudo is in situations where you need to tunnel X-Windows. For example, user1 uses "ssh -X host1" and then once logged into host1 (with X DISPLAY setting appropriately automatically handled by ssh -X) then needs to sudo to user2 and run an X-Windows client the DISPLAY variable doesn't seem to get propagated. Setting the DISPLAY variable manually to the value from the tunneled session (localhost:10.0) and then running the X-client application results in "X11 connection rejected because of wrong authentication". It’s not just for root access though. You can use it to grant account access from one user to another. For example, logging in as user1 and then entering “sudo -i -u user2″ gives you an interactive session as user2 without having to know user2′s password (assuming appropriate sudoers configuration). So for example if user2 is a production account running say the accounting system and user1, a support person, needs to login to the production accounting account they can do so without knowing the production account password and their access is logged (i.e., user user1 logged in as user2 at ).
One issue I’ve encountered with sudo is in situations where you need to tunnel X-Windows. For example, user1 uses “ssh -X host1″ and then once logged into host1 (with X DISPLAY setting appropriately automatically handled by ssh -X) then needs to sudo to user2 and run an X-Windows client the DISPLAY variable doesn’t seem to get propagated. Setting the DISPLAY variable manually to the value from the tunneled session (localhost:10.0) and then running the X-client application results in “X11 connection rejected because of wrong authentication”.

]]> By: iansane http://www.linux-mag.com/id/4824/#comment-5020 iansane Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5020 The use of acronyms has gone to insane levels in all of the IT World. SQL is three letters S, Q, and L. That's how it's pronounced. People who insist on calling it sequel are TARDS in my opinion. Trying to make words when it's just as fast to say and even faster to write the letters doesn't make one seem cool or computer savy. It makes them silly. I won't say a word about sudo because I have the utmost respect for the linux Guru's. They can call it what they want.<br /> It's funny though that my friend who got me started on Linux kept telling me to try installing a Digital Subscriber Line on my thumbdrive? DSL (Damn Small Linux):-)<br /> <br /> Thanks for the informative article! It beats trying to figure out man pages. The use of acronyms has gone to insane levels in all of the IT World. SQL is three letters S, Q, and L. That’s how it’s pronounced. People who insist on calling it sequel are TARDS in my opinion. Trying to make words when it’s just as fast to say and even faster to write the letters doesn’t make one seem cool or computer savy. It makes them silly. I won’t say a word about sudo because I have the utmost respect for the linux Guru’s. They can call it what they want.
It’s funny though that my friend who got me started on Linux kept telling me to try installing a Digital Subscriber Line on my thumbdrive? DSL (Damn Small Linux):-)

Thanks for the informative article! It beats trying to figure out man pages.

]]> By: koushik.ms http://www.linux-mag.com/id/4824/#comment-5021 koushik.ms Wed, 30 Nov -0001 00:00:00 +0000 http://www.linux-mag.com/id/4824/#comment-5021 Thanks for nice article. Very informative. Thanks for nice article. Very informative.

]]>