Sudo - How do I disable that 5 minutes thing?
Alan Dunkley
alan at 1mfc.org
Wed Dec 31 14:51:47 UTC 2003
On Wednesday 31 Dec 2003 2:44 pm, Nicholas Evans wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello
>
> ~ I'm wondering how do I go about disabling the 5 minute period
> after an sudo where you don't need to give your password again. I read
> somewhere there was a line I could edit in the sudoers file, but I
> couldn't find this line. I've tried google, but all I'm getting are
> guides on how to use sudo. Any pointers?
>
> Thanks!
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE/8uDNHBMJeYrn+U8RAh7oAJ9awaBvJ/gHOTVYpEkI6XAOHoOPCwCfa2RC
> O09Fo4QT171VF0V6NVv0RsI=
> =qyoa
> -----END PGP SIGNATURE-----
I suggest you just run a "man sudoers" to get the details about the sudo
config file. The parameter you should look at is "timestamp_timeout"
Man pages may be old-hat in these internet-savvy days, but they are still very
useful and should not be discounted as a source of good, accurate
information.
viz:
timestamp_timeout
Number of minutes that can elapse before sudo will ask for
a passwd again. The default is 5. Set this to 0 to always
prompt for a password. If set to a value less than 0 the
user’s timestamp will never expire. This can be used to
allow users to create or delete their own timestamps via
sudo -v and sudo -k respectively.
Hope this helps, but please be careful, or you may open your system to all
sorts of possible attacks, either accidental or deliberate.
--
Alan D
More information about the fedora-list
mailing list