Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Task L solution contains incorrect visudo command #5

Merged
merged 2 commits into from
Sep 8, 2023

Conversation

kenzie-rasmussen
Copy link
Contributor

Really appreciate this guide! I'm studying through the exam questions for my upcoming exam.

While doing task L this morning, discovered that my Ubuntu machine didn't like the visudo command given here. A little research taught me that sysadmin is a user, not a group, so it doesn't need the %. There was also a missing (ALL) chunk that other definitions in the sudoers file had.

If there's something I didn't know, please correct me! I'm still learning. But I wanted to give back to this guide since it's so helpful, so I made a quick correction here for an easy update.

It's a small change but the answer here won't work as is
@giulianopz
Copy link
Owner

giulianopz commented Sep 8, 2023

Hi @kenzie-rasmussen ,

you are right with respect to the '%' sign, that is for groups not users.
Instead, I think the (ALL) string is not needed here although the internet is bloated with copy-pasted examples that show the opposite (that (ALL) is the Runas_Alias part of the User Specification and the sysadmin user is not requested to impersonate other users).
See the following example from sudoers(5):

FULLTIMERS      ALL = NOPASSWD: ALL

Please, remove (ALL) from that line.

since it's a run alias we don't need for sysadmin
@kenzie-rasmussen
Copy link
Contributor Author

Okay! I didn't realize the (ALL) was specifying a Runas_Alias, that's good to know. I've updated the request with the changes to not include it.

@giulianopz giulianopz merged commit 60d0f9f into giulianopz:main Sep 8, 2023
@giulianopz
Copy link
Owner

Perfect, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants