sudoers line for sudo user with /bin/su command or runas or /bin/bash
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
What is the difference between these three sudoers line and which one is more secure and auditable? End goal is anyone in the group 'sudogroup' group should be able to sudo to user 'swuser' or run as 'swuser' commands without asking for a password.
%sudogroup ALL=(root) NOPASSWD: /bin/su - swuser
%sudogroup ALL=(swuser) NOPASSWD:ALL
%sudogroup ALL=(swuser) NOPASSWD: /bin/bash
This question may be complement to su vs sudo -s vs sudo -i vs sudo bash
OR
What does "sudo su -s /bin/bash - <username>" do?
security sudo su
edited 2 mins ago
Jeff Schaller
35.4k952116
asked 14 mins ago
yman
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
0
down vote
favorite
What is the difference between these three sudoers line and which one is more secure and auditable? End goal is anyone in the group 'sudogroup' group should be able to sudo to user 'swuser' or run as 'swuser' commands without asking for a password.
%sudogroup ALL=(root) NOPASSWD: /bin/su - swuser
%sudogroup ALL=(swuser) NOPASSWD:ALL
%sudogroup ALL=(swuser) NOPASSWD: /bin/bash
This question may be complement to su vs sudo -s vs sudo -i vs sudo bash
OR
What does "sudo su -s /bin/bash - <username>" do?
security sudo su
edited 2 mins ago
Jeff Schaller
35.4k952116
asked 14 mins ago
yman
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Is this a test question, or are you considering one of these for production use?
– Jeff Schaller
2 mins ago
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
What is the difference between these three sudoers line and which one is more secure and auditable? End goal is anyone in the group 'sudogroup' group should be able to sudo to user 'swuser' or run as 'swuser' commands without asking for a password.
%sudogroup ALL=(root) NOPASSWD: /bin/su - swuser
%sudogroup ALL=(swuser) NOPASSWD:ALL
%sudogroup ALL=(swuser) NOPASSWD: /bin/bash
This question may be complement to su vs sudo -s vs sudo -i vs sudo bash
OR
What does "sudo su -s /bin/bash - <username>" do?
security sudo su
edited 2 mins ago
Jeff Schaller
35.4k952116
asked 14 mins ago
yman
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
What is the difference between these three sudoers line and which one is more secure and auditable? End goal is anyone in the group 'sudogroup' group should be able to sudo to user 'swuser' or run as 'swuser' commands without asking for a password.
%sudogroup ALL=(root) NOPASSWD: /bin/su - swuser
%sudogroup ALL=(swuser) NOPASSWD:ALL
%sudogroup ALL=(swuser) NOPASSWD: /bin/bash
This question may be complement to su vs sudo -s vs sudo -i vs sudo bash
OR
What does "sudo su -s /bin/bash - <username>" do?
security sudo su
security sudo su
edited 2 mins ago
Jeff Schaller
35.4k952116
asked 14 mins ago
yman
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 2 mins ago
Jeff Schaller
35.4k952116
asked 14 mins ago
yman
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 2 mins ago
Jeff Schaller
35.4k952116
edited 2 mins ago
Jeff Schaller
35.4k952116
edited 2 mins ago
Jeff Schaller
35.4k952116
35.4k952116
asked 14 mins ago
yman
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 14 mins ago
yman
1
asked 14 mins ago
yman
1
1
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
yman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Is this a test question, or are you considering one of these for production use?
– Jeff Schaller
2 mins ago
add a comment |Â
Is this a test question, or are you considering one of these for production use?
– Jeff Schaller
2 mins ago
Is this a test question, or are you considering one of these for production use?
– Jeff Schaller
2 mins ago
Is this a test question, or are you considering one of these for production use?
– Jeff Schaller
2 mins ago
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
yman is a new contributor. Be nice, and check out our Code of Conduct.
yman is a new contributor. Be nice, and check out our Code of Conduct.
yman is a new contributor. Be nice, and check out our Code of Conduct.
yman is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f480423%2fsudoers-line-for-sudo-user-with-bin-su-command-or-runas-or-bin-bash%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Is this a test question, or are you considering one of these for production use?
– Jeff Schaller
2 mins ago