[sudo-users] sudoers set-up

[Russell Van Tassell]

On Tue, Nov 04, 2008 at 11:26:52AM -0800, Kohlmeier, Marylou wrote:
> We would to use "sudo" so we don't have to give out our root password to
> our staff. We are on HP-UX 11.23 Itanium.
> 
> I've been trying to configure our "sudoers" and still having problem.
> When I try to use the command "sudo -l", I get the error: sudo - must be
> setuid root

Well, one thing to think about "as a direct substitute for su" is the
following:

  sudo su
  passwd root

...or simple "sudo passwd -u root" ...so, it's not quite just a drop-in
replacement for not distributing the root password, in my honest opinion
(though I understand many folks seem to use it this way -- at least you
get logging, even if that logging only really contains a list of every
time someone got a root shell).

As far as the setuid problem, you'll just need to add the setuid bit to
the binary ("chmod 4111 /path/to/sudo").  You might find this link
handy, too:

	http://sudo.ws/sudo/troubleshooting.html

Regards,
Russell


-- 
Russell M. Van Tassell
russell at loosenut.com

Did you ever notice that when you blow in a dog's face, he gets mad at
you, but when you take him on a car ride, he sticks his head out the
window?