Re: using sudo

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Dec 02, 2006 at 06:18:32PM -0600, David Berg wrote:
> >>So I gave myself full sudo access, disabled root logins, and eliminated
> >>the root password.  Works great on the command line.
> >Then, append the line "UGROUPS=wheel" to the end of every file in
> >/etc/security/console.apps which you want to have sudo-like behavior.
> Thank-you.
> This gives the desired behavior for users in group wheel.  However, for 
> users not in wheel it still asks for the nonexistent root password.  Is 
> there a way to have the system simply state something like, "You don't 
> have permission to access this program.  Contact your system administrator?"

Yes. In each of these files, there is a line which say says "USER=root".
Change that to "USER=<none>" (brackets and all), and, in combination with
UGROUPS=wheel, you'll get this behavior. (Anyone in wheel will be asked for
their own password; anyone else will get an "Insufficent Rights" error.
Which isn't as helpful as "contact your sysadmin", but close.)

> Or perhaps there is a man page/doc I should take a look at instead of 
> asking here.  Any pointers?

It's all documented in the "userhelper" man page, which I realize isn't
obvious.


-- 
Matthew Miller           mattdm@xxxxxxxxxx          <http://mattdm.org/>
Boston University Linux      ------>              <http://linux.bu.edu/>


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux