Home / server / Questions / 247909
Accepted
jberryman
Asked: 2011-03-16 18:15:26 +0800 CST

Using NOPASSWD for specific commands in sudoers file, PASSWD for all others

  • 772

I would like to configure sudo such that users can run some specific commands without entering a password (for convenience) and can run all other commands by entering a password.

This is what I have, but this does not work; a password is always required:

Defaults    env_reset Defaults    timestamp_timeout = 1 

root    ALL=(ALL:ALL) ALL 

# Allow members of group sudo to execute any command 
%sudo   ALL=(ALL:ALL) NOPASSWD: /usr/sbin/pm-suspend, /usr/bin/apt-get, PASSWD: ALL 

#includedir /etc/sudoers.d

Note that this is a debian system which uses this adding users to the "sudo" group method.

Thanks.

linux debian sudo

1 Answers

  1. Best Answer

    You should be able to do something like:

    Cmnd_Alias                WITHOUTPW = /path/to/cmd1, /path/to/cmd2
Defaults!WITHOUTPW        !authenticate
    • 4