Sudo Cheat Sheet

From Coolscript
Jump to navigation Jump to search
  • Edit
visudo /etc/sudoers
  • Ask for root password when exec sudo -i
Defaults rootpw
  • Add user to sudo group
usermod -aG sudo username
  • Allow apache to exec something
www-data ALL=NOPASSWD: /path/command
  • Allow admin to exec something
admin ALL=(ALL:ALL) ALL
  • Allow admin - no pwd
admin ALL=(ALL) NOPASSWD:ALL
  • Consider to add in ssh config

AllowUsers admin .... or ansible@1.2.3.4