[PADS] SUDO question

Walt Mankowski waltman@pobox.com
Mon, 11 Feb 2002 16:06:03 -0500


--envbJBWh7q8WU6mo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Feb 11, 2002 at 03:22:45PM -0500, Mike Leone wrote:
> So, I'm running my mail server on 2.2 (aka potato). So how come,
> when I try and issue a "sudo" command, so I can run something with
> root's priveleges, it asks me for my USER password, and not the ROOT
> password:
>=20
> turgon@workhorse:~$ sudo tail -f /var/log/mail.log
> Password:
>=20
> At that point, I have to enter the password for "turgon", who is the
> user I'm logged in as, and not the root password.
>=20
> On all my other systems, I have to enter root's password to use
> sudo. Now, granted, at one time root's password and turgon's
> password were the same, but they are not the same now. I did verify
> that much, at least.

Are you sure about this?  The sudo manpage clearly states:

    By default, sudo requires that users authenticate themselves with
    a password (NOTE: this is the user's password, not the root
    password).

The whole point of sudo is to give users access to run a set of
privileged commands WITHOUT giving them the root password.  Well,
maybe not the WHOLE point, but a major one nonetheless.

Walt


--envbJBWh7q8WU6mo
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8aDI7XfGeK2entYQRAirhAJ0cYiuVDE31XdfA0kgYgOlruMepxgCfY/e8
HB0ThpQ4oYKWw/6iw6u1xGI=
=+kSN
-----END PGP SIGNATURE-----

--envbJBWh7q8WU6mo--