sudo without password

Chanchao custom at freenet.de
Wed Jun 7 03:41:30 UTC 2006


On Tue, 2006-06-06 at 20:36 -0400, Chris Peterman wrote:

> On Tuesday 06 June 2006 20:11, wastrel wrote:
> > username ALL = NOPASSWD: ALL
> >
> > seems to work.  (modified from the examples section of 'man sudoers')

> Note that doing this is a very bad idea from a security standpoint....

I don't think so. You still have to use sudo, just not confirm your
password.  

The *ONE AND ONLY* "danger" that you're adding here is that an
unauthorized person at the keyboard can now perform administrative tasks
without having to reboot into a recovery console or pop in her own Live
CD.  :P :)

And none of this makes the slightest difference to the well-being of the
single most important stuff on your computer: Your own files. 

So.............. a 'very bad idea from a security standpoint'... hardly.

Cheers,
Chanchao





More information about the ubuntu-users mailing list