[sudo-users] New Member Request for Guidance

Todd C. Miller Todd.Miller at sudo.ws
Mon Sep 10 12:23:51 MDT 2018


What you have described looks like it should work.
However, since sudo uses the last match, it is possible that
the rule:

    user ALL=(ALL) NOPASSWD: /usr/bin/rsync

is being overridden by another rule.  For example, if you have:

    user ALL=(ALL:ALL) ALL

*after* the rsync rule, it will take precedence and since it
doesn't have the NOPASSWD tag, you will be asked for a password.

The output of "sudo -l" can be helpful in determining the order of
the rules.

 - todd


More information about the sudo-users mailing list