[sudo-users] /etc/sudoers.d macOS 10.12.4

[Adams, Steve]

Hi Todd,
I think you’ve got something there

The user account doesn’t show it’s a member of the _localSudo group using the groups command
The Mac does see it being a member of the group using the Directory Utility app which is what I’ve been using

I don’t understand how both are different 

Hummm!


On 19/05/2017, 15:53, "Todd C. Miller" <Todd.Miller at courtesan.com> wrote:

    You should not need to reboot for the sudo changes to take effect.
    Does the _localSudo group show up when the user runs the "groups"
    command or if you run "groups otheruser"?  You can also try running
    "sudo -ll -U otheruser" as root to see what sudo thinks "otheruser"
    is allowed to run.
    
    Another thing to keep in mind is that sudo will look up the user's
    groups by group ID to map to the group name.  If the local group
    uses the same group ID as a remote group this can cause problems.
    
     - todd
    
    

This email may contain information which is confidential.  If you have received it in error, please notify the sender immediately and then delete it.  Please do not copy it, disclose its contents or use it for any purpose.


 


 

This email is sent on behalf of a company in the Penguin Random House UK group of companies, comprising The Random House Group Limited, a company registered in England and Wales with number 954009, registered office 20 Vauxhall Bridge Road, London SW1V 2SA,  Penguin Books Limited, a company registered in England and Wales with number 861590, registered office 80 Strand, London WC2R 0RL, Dorling Kindersley Limited, a company registered in England and Wales with number 1177822, registered office 80 Strand London WC2R 0RL and their respective subsidiary companies.