[sudo-users] sudo never prompts for password
Todd C. Miller
Todd.Miller at courtesan.com
Thu Nov 25 15:18:57 EST 2010
Some vendors build sudo with the exempt_group feature enabled by
default. Try running the this on one of the affected servers:
$ sudo sudo -V | grep exempt
If you see something like:
Users in this group are exempt from password and PATH requirements: sudo
then that sudo binary has been compiled such that users in the
"sudo" group need not enter a password.
You can disable that by adding the following line to sudoers file.
Defaults !exempt_group
- todd
More information about the sudo-users
mailing list