using sudo
Matthew Miller
mattdm at mattdm.org
Sun Dec 3 00:30:23 UTC 2006
On Sat, Dec 02, 2006 at 06:18:32PM -0600, David Berg wrote:
> >>So I gave myself full sudo access, disabled root logins, and eliminated
> >>the root password. Works great on the command line.
> >Then, append the line "UGROUPS=wheel" to the end of every file in
> >/etc/security/console.apps which you want to have sudo-like behavior.
> Thank-you.
> This gives the desired behavior for users in group wheel. However, for
> users not in wheel it still asks for the nonexistent root password. Is
> there a way to have the system simply state something like, "You don't
> have permission to access this program. Contact your system administrator?"
Yes. In each of these files, there is a line which say says "USER=root".
Change that to "USER=<none>" (brackets and all), and, in combination with
UGROUPS=wheel, you'll get this behavior. (Anyone in wheel will be asked for
their own password; anyone else will get an "Insufficent Rights" error.
Which isn't as helpful as "contact your sysadmin", but close.)
> Or perhaps there is a man page/doc I should take a look at instead of
> asking here. Any pointers?
It's all documented in the "userhelper" man page, which I realize isn't
obvious.
--
Matthew Miller mattdm at mattdm.org <http://mattdm.org/>
Boston University Linux ------> <http://linux.bu.edu/>
More information about the fedora-list
mailing list