sudo (superuser do) - homepage
package name:
sudo
configuration file:
/etc/sudoers (must be edited with /usr/sbin/visudo as root)
usage:
sudo <command>
sudo -l, list allowed commands for current user
sample config:
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers
file.
#
# Host alias specification
# User alias specification
# Cmnd alias specification
Cmnd_Alias RPM = /bin/rpm
Cmnd_Alias INIT = /sbin/init
# Defaults specification
# User privilege specification
root ALL = (ALL) ALL
resinblade ALL = NOPASSWD: RPM, INIT
# Uncomment to allow people in group wheel to run all commands
# %wheel
ALL=(ALL) ALL
# Same thing without a password
# %wheel
ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
logging:
incident
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these two things:
#1) Respect the privacy of
others.
#2) Think before you type.
Password:
Sorry, try again.
Password:
testuser is not in the sudoers file. This incident will be
reported.
log
reported in /var/log/sudo.log
Feb 13 17:50:34 : testuser : HOST=abba : user NOT in sudoers ;
TTY=pts/0 ;
PWD=/home/resinblade/rpms ; USER=root ; COMMAND=/bin/rpm -i
xbill-2.1-2mdk.i586.rpm