Re: OT: sudo question

2020-02-15 Thread Francis . Montagnac
Hi. On Tue, 04 Feb 2020 12:25:39 -0800 Mike Wright wrote: > launching an xterm from the cli then entering in the new xterm: > lxc list > and I get a password prompt. Absolutely no clue. I think you should call: sudo lxc list or there is some magic to call sudo in your context. -- f

Re: OT: sudo question

2020-02-04 Thread stan via users
On Tue, 4 Feb 2020 14:57:31 -0800 Mike Wright wrote: > lxc-* files are from the original LXC. lxc is the base command for > LXD which is based on LXC. So, a naive guess that was wrong. :-) Thanks for the info. ___ users mailing list -- users@lists

Re: OT: sudo question

2020-02-04 Thread Mike Wright
On 2/4/20 1:10 PM, Earl Ramirez wrote: On Tue, 2020-02-04 at 12:25 -0800, Mike Wright wrote: # Cmnd alias specification Cmnd_Alias LXC=/usr/bin/lxc # Members of the admin group may gain root privileges %admin ALL=(ALL) ALL # Allow members of group sudo to execute any command %sudo ALL=(ALL:AL

Re: OT: sudo question

2020-02-04 Thread Mike Wright
On 2/4/20 1:13 PM, stan via users wrote: On Tue, 4 Feb 2020 12:25:39 -0800 Mike Wright wrote: Defaultsenv_reset Defaultsmail_badpass Defaultssecure_path="some_path" # Cmnd alias specification Cmnd_Alias LXC=/usr/bin/lxc # Members of the admin group may gain root privileges %adm

Re: OT: sudo question

2020-02-04 Thread stan via users
On Tue, 4 Feb 2020 12:25:39 -0800 Mike Wright wrote: > Defaultsenv_reset > Defaultsmail_badpass > Defaultssecure_path="some_path" > > # Cmnd alias specification > Cmnd_Alias LXC=/usr/bin/lxc > > # Members of the admin group may gain root privileges > %admin ALL=(ALL) ALL > > # All

Re: OT: sudo question

2020-02-04 Thread Earl Ramirez
On Tue, 2020-02-04 at 12:25 -0800, Mike Wright wrote: > # Cmnd alias specification > Cmnd_Alias LXC=/usr/bin/lxc > > # Members of the admin group may gain root privileges > %admin ALL=(ALL) ALL > > # Allow members of group sudo to execute any command > %sudo ALL=(ALL:ALL) ALL > > # User privile

Re: OT: sudo question

2020-02-04 Thread Mike Wright
On 2/4/20 10:01 AM, Mauricio Tavares wrote: On Tue, Feb 4, 2020 at 12:49 PM Todd Zullinger wrote: Hi, Mario Michele Macaluso wrote: Il 03/02/20 22:23, Mike Wright ha scritto: Cmnd_Alias LXC=/usr/bin/lxc rootALL=(ALL:ALL) ALL mikeALL=(ALL) NOPASSWD:LXC I'm not sure, but it could b

Re: OT: sudo question

2020-02-04 Thread Mauricio Tavares
On Tue, Feb 4, 2020 at 12:49 PM Todd Zullinger wrote: > > Hi, > > Mario Michele Macaluso wrote: > > Il 03/02/20 22:23, Mike Wright ha scritto: > >> Cmnd_Alias LXC=/usr/bin/lxc > >> > >> rootALL=(ALL:ALL) ALL > >> mikeALL=(ALL) NOPASSWD:LXC > > > > I'm not sure, but it could be (space requi

Re: OT: sudo question

2020-02-04 Thread Todd Zullinger
Hi, Mario Michele Macaluso wrote: > Il 03/02/20 22:23, Mike Wright ha scritto: >> Cmnd_Alias LXC=/usr/bin/lxc >> >> root    ALL=(ALL:ALL) ALL >> mike    ALL=(ALL) NOPASSWD:LXC > > I'm not sure, but it could be (space required) > > mikeALL=(ALL) NOPASSWD: LXC White space is optional there,

Re: OT: sudo question

2020-02-04 Thread Mario Michele Macaluso
Il 03/02/20 22:23, Mike Wright ha scritto: On 2/3/20 12:34 PM, Earl Ramirez wrote: On Sun, 2020-02-02 at 23:27 -0500, Todd Zullinger wrote: The format of that rule looks fine to me.  You might look in the logs (/var/log/secure if you've got syslog enabled, else use the journalctl command). It

Re: OT: sudo question

2020-02-03 Thread Tony Nelson
On 20-02-03 16:23:07, Mike Wright wrote: ... I am befuddled. Here is my sudoers file: Defaultsenv_reset Defaultsmail_badpass Defaultssecure_path= Cmnd_Alias LXC=/usr/bin/lxc rootALL=(ALL:ALL) ALL mikeALL=(ALL) NOPASSWD:LXC %admin ALL=(ALL) ALL %sudo ALL=(AL

Re: OT: sudo question

2020-02-03 Thread Mike Wright
On 2/3/20 12:34 PM, Earl Ramirez wrote: On Sun, 2020-02-02 at 23:27 -0500, Todd Zullinger wrote: The format of that rule looks fine to me.  You might look in the logs (/var/log/secure if you've got syslog enabled, else use the journalctl command). It may be that you're hitting another rule whic

Re: OT: sudo question

2020-02-03 Thread Earl Ramirez
On Sun, 2020-02-02 at 23:27 -0500, Todd Zullinger wrote: > The format of that rule looks fine to me. You might look in > > the logs (/var/log/secure if you've got syslog enabled, else > > use the journalctl command). > > > > It may be that you're hitting another rule which supercedes > > the

Re: OT: sudo question

2020-02-02 Thread Todd Zullinger
Hi, Mike Wright wrote: > I would like to execute a command using sudo and not have to provide a > password. After much manpage time I added this: > > mikeALL=(ALL) NOPASSWD: /usr/bin/lxc > > In theory this allows mike, from any and all hosts, to execute without > a password. > > Nonethele