- A sudoers rule lets a specific user or group (
%group) run a specific command as a specific account. - The rule goes into a separate file in
/etc/sudoers.dthroughvisudo -f, gets mode0440, and the whole configuration is checked withvisudo -c. parsed OKis grammar; the meaning is checked withsudo -l -Uand with calls made as the grantee: the allowed one passes, a neighbouring one does not.- At the start of the lesson labops got two lines and a refusal for three: the rule allowed exactly
tail -n 2, and sudo let no other call through without a password.
Step 8 of 8 · summary · 2 min
Summary
Found an inaccuracy? Report an error in the lesson