[sudo-users] Sudo not asking users' password
Fabien Bagard
fabien.bagard at parrot.com
Thu Nov 18 03:33:20 EST 2010
On 11/18/2010 12:40 AM, Todd C. Miller wrote:
> In message<4CE40F3B.4080802 at parrot.com>
> so spake Fabien Bagard (fabien.bagard):
>
>
>> I have some trouble with sudo :
>>
>> On some servers, sudo grant root privileges to members of group 'sudo'
>> without asking them their password.
>> The problem is I do not understand why, and how to get the password asked.
>>
>> It is not a timeout problem, because even after a long while, or even
>> without the /var/rum/sudo/ dir, the problem persists.
>>
> It sounds like sudo on those servers was compiled with
> exempt_group set to "sudo". Try running the this on
> one of the affected servers:
>
> $ sudo sudo -V | grep exempt
>
> If you see something like:
>
> Users in this group are exempt from password and PATH requirements: sudo
>
> then that sudo binary has been compiled such that users in
> the sudo group need not enter a password.
>
> You can disable that by adding the following line to sudoers file.
>
> Defaults !exempt_group
>
> - todd
>
Thank you Todd for your quick response.
It was exactly this problem.
--
Fabien Bagard
More information about the sudo-users
mailing list