undefined | Better HN

0 pointstadbit4y ago0 comments

> If you are logged in as a sudo user, provided allowing only an ssh key, can you can't do anything unless: > - you know the password

This assumes one isn't using password-less sudo (NOPASSWD), which several distros do set by default and many users change to it for convenience.

0 comments

5 comments · 1 top-level

aryhdrsfhzdf4y ago· 4 in thread

What are some examples of these "several distros" that set it by default? Of the major ones I'm willing to use in production (Debian, Ubuntu, RHEL and derivs, SuSE, hesitantly Arch), none offer NOPASSWD sudo to users marked as administrative in each distro's normal way. (i.e. various group memberships)

NOPASSWD is poor hygiene.

gerikson4y ago

Raspbian doesn't require a password when using sudo.

mastax4y ago

GCP sets it in Debian, apparently.

mhio4y ago

Amazon Linux

jschwartzi4y ago

Also Ubuntu in Azure.

j / k navigate · click thread line to collapse