Sudo Cheat Sheet: Difference between revisions
Jump to navigation
Jump to search
(Created page with "*Edit visudo /etc/sudoers *Ask for root password when exwec '''sudo -i''' Defaults rootpw *Add user to sudo group usermod -aG sudo username *Allow apache to exec somethi...") |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
visudo /etc/sudoers | visudo /etc/sudoers | ||
*Ask for root password when | *Ask for root password when exec '''sudo -i''' | ||
Defaults rootpw | Defaults rootpw | ||
| Line 10: | Line 10: | ||
*Allow apache to exec something | *Allow apache to exec something | ||
www-data ALL=NOPASSWD: /path/command | www-data ALL=NOPASSWD: /path/command | ||
*Allow admin to exec something | |||
admin ALL=(ALL:ALL) ALL | |||
*Allow admin - no pwd | |||
admin ALL=(ALL) NOPASSWD:ALL | |||
*Consider to add in ssh config | |||
AllowUsers admin .... or ansible@1.2.3.4 | |||
Latest revision as of 21:51, 16 February 2023
- Edit
visudo /etc/sudoers
- Ask for root password when exec sudo -i
Defaults rootpw
- Add user to sudo group
usermod -aG sudo username
- Allow apache to exec something
www-data ALL=NOPASSWD: /path/command
- Allow admin to exec something
admin ALL=(ALL:ALL) ALL
- Allow admin - no pwd
admin ALL=(ALL) NOPASSWD:ALL
- Consider to add in ssh config
AllowUsers admin .... or ansible@1.2.3.4