[sudo-users] /etc/sudoers.d macOS 10.12.4

[Adams, Steve]

Hi all,
Been pulling my hair out in trying to get my sudoers file working and hoping some experts here could help me.

On macOS 10.12.4 there’s the ability to create your own sudoers file instead of using the original which is great.
From my understanding I need to use visudo to create it and copy it to /etc/sudoers.d location which I have done.

The end goal is to use our custom sudoers file which has the line %_localSudo   ALL=(ALL) ALL
_localSudo is local group and I have a scripted solution to populate it based on an AD group membership

My problem is that the Mac doesn’t let members of the _localSudo group to elevate to sudo
The permissions of the additional sudoers file is 440 the same as the /etc/sudoers file
I’ve also disabled SIP as I thought that was blocking/stopping something even though the file as getting created and populated

Does anyone know where I’ve gone wrong?

Sudoers version 1.8.17p1

Thanks all

This email may contain information which is confidential.  If you have received it in error, please notify the sender immediately and then delete it.  Please do not copy it, disclose its contents or use it for any purpose.


 


 

This email is sent on behalf of a company in the Penguin Random House UK group of companies, comprising The Random House Group Limited, a company registered in England and Wales with number 954009, registered office 20 Vauxhall Bridge Road, London SW1V 2SA,  Penguin Books Limited, a company registered in England and Wales with number 861590, registered office 80 Strand, London WC2R 0RL, Dorling Kindersley Limited, a company registered in England and Wales with number 1177822, registered office 80 Strand London WC2R 0RL and their respective subsidiary companies.