Home / server / Questions / 26303
Accepted
Brian Lyttle
Asked: 2009-06-16 17:50:19 +0800 CST

Why do I have to edit /etc/sudoers with visudo?

  • 772

I've noticed that the sudoers file and cron config files act in a special way compared to other config files on Linux. They need to be edited with a special wrapper rather than any text editor. Why is this?

linux unix security sudo configuration

2 Answers

  1. Best Answer

    You use visudo mostly to prevent from breaking your system. Visudo runs checks on your changes to make sure you didn't mess anything up. If you did mess something up, you could completely wreck your ability to fix it or do anything requiring privileges without rebooting into a rescue mode.

    The man page describes this.

    visudo edits the sudoers file in a safe fashion, analogous to vipw(8). visudo locks the sudoers file against multiple simultaneous edits, provides basic sanity checks, and checks for parse errors. If the sudoers file is currently being edited you will receive a message to try again later.

    • 74

  2. Zoredache answer is perfect.

    One more thing that can be worth to mention. You can use you favorite editor by setting EDITOR or VISUAL:

    export EDITOR=whatevertexteditoryouwant
export VISUAL=whatevertexteditoryouwant

    Or:

    EDITOR=whatevertexteditoryouwant visudo
    • 19