有可能!!!Isbasic 写了:非admin组的用户可以sudo吗?
有趣的sudo 和su
- tigerdoo
- 帖子: 327
- 注册时间: 2006-11-17 23:02
LZ有点偏执
IBM T41-P4M 1.5G/1GB/40GB HDD/DVD/14.1TFT/IPW2100 & 10-100M
OS:Xubuntu 11.10
生活就是折腾
活在成都
使用update-rc.d管理Linux服务
OS:Xubuntu 11.10
生活就是折腾
活在成都
使用update-rc.d管理Linux服务
- gaobuhaoya
- 帖子: 28
- 注册时间: 2007-06-26 4:29
- gaobuhaoya
- 帖子: 28
- 注册时间: 2007-06-26 4:29
-
- 帖子: 27
- 注册时间: 2007-06-25 2:13
-
- 帖子: 27
- 注册时间: 2007-06-25 2:13
very good!karron 写了:你去试试windows的管理员是否可以修改别的管理员的密码.
看来你根本不明白 有个用户群组 这个东西. 只要是系统管理员群组的人都可以对系统进行完全的控制.
你可以再新建一个用户,看看它是否可以用sudo,看看它是否可以修改root的密码.
对于你的兴趣,大家已经很明白的告诉你了,你的这个用户不是什么普通用户,它是一个具有和root基本上相同的权限的用户,只不过在进行系统管理操作之前,必须用sudo. 它和root就是你系统的两个天神,只不过这个天神怕自己一不小心误操作把自己的世界给搞坏了,于是规定自己,在可能把系统搞坏的动作之前,必须多加一个确认.
- wcb552101315
- 帖子: 66
- 注册时间: 2007-06-29 22:38
-
- 帖子: 115
- 注册时间: 2007-06-20 10:27
- 联系:
- qianwx
- 帖子: 730
- 注册时间: 2006-07-08 14:41
-
- 帖子: 209
- 注册时间: 2007-06-01 22:11
- tianping
- 帖子: 278
- 注册时间: 2007-08-26 15:57
哇,06年的帖子~~~~
(时间: 2006-9-21 周四, 22:57 标题: 有趣的sudo 和su)
建议查看一下 info sudo 和 gedit /etc/sudoers
另:建一个普通用户去运行sudo就没有权限。
------------------
sudo allows a permitted user to execute a command as the superuser or
another user, as specified in the sudoers file. The real and effective
uid and gid are set to match those of the target user as specified in
the passwd file and the group vector is initialized based on the group
file (unless the -P option was specified). If the invoking user is
root or if the target user is the same as the invoking user, no pass‐
file (unless the -P option was specified). If the invoking user is
root or if the target user is the same as the invoking user, no pass‐
word is required. Otherwise, sudo requires that users authenticate
themselves with a password by default (NOTE: in the default configura‐
tion this is the user’s password, not the root password). Once a user
has been authenticated, a timestamp is updated and the user may then
use sudo without a password for a short period of time (15 minutes
unless overridden in sudoers).…………
------------------
# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
# Host alias specification
# User alias specification
# Cmnd alias specification
# Defaults
Defaults !lecture,tty_tickets,!fqdn
# User privilege specification
root ALL=(ALL) ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
(时间: 2006-9-21 周四, 22:57 标题: 有趣的sudo 和su)
建议查看一下 info sudo 和 gedit /etc/sudoers
另:建一个普通用户去运行sudo就没有权限。
------------------
sudo allows a permitted user to execute a command as the superuser or
another user, as specified in the sudoers file. The real and effective
uid and gid are set to match those of the target user as specified in
the passwd file and the group vector is initialized based on the group
file (unless the -P option was specified). If the invoking user is
root or if the target user is the same as the invoking user, no pass‐
file (unless the -P option was specified). If the invoking user is
root or if the target user is the same as the invoking user, no pass‐
word is required. Otherwise, sudo requires that users authenticate
themselves with a password by default (NOTE: in the default configura‐
tion this is the user’s password, not the root password). Once a user
has been authenticated, a timestamp is updated and the user may then
use sudo without a password for a short period of time (15 minutes
unless overridden in sudoers).…………
------------------
# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
# Host alias specification
# User alias specification
# Cmnd alias specification
# Defaults
Defaults !lecture,tty_tickets,!fqdn
# User privilege specification
root ALL=(ALL) ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
- ving
- 帖子: 3741
- 注册时间: 2007-07-29 16:47
- 来自: 地精魔法学院