From owner-freebsd-questions@FreeBSD.ORG Sat Dec 31 19:57:00 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6892516A41F for ; Sat, 31 Dec 2005 19:57:00 +0000 (GMT) (envelope-from kirk@strauser.com) Received: from kanga.honeypot.net (kanga.honeypot.net [208.162.254.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id D526243D48 for ; Sat, 31 Dec 2005 19:56:59 +0000 (GMT) (envelope-from kirk@strauser.com) Received: from localhost (localhost [127.0.0.1]) by kanga.honeypot.net (Postfix) with ESMTP id 9FC9B98C40 for ; Sat, 31 Dec 2005 13:56:58 -0600 (CST) Received: from kanga.honeypot.net ([127.0.0.1]) by localhost (kanga.honeypot.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26053-05 for ; Sat, 31 Dec 2005 13:56:57 -0600 (CST) Received: from kanga.honeypot.net (unknown [IPv6:2001:470:1f01:224:1::2]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by kanga.honeypot.net (Postfix) with ESMTP id 0E78D959BF for ; Sat, 31 Dec 2005 13:56:56 -0600 (CST) From: Kirk Strauser To: freebsd-questions@freebsd.org Date: Sat, 31 Dec 2005 13:56:51 -0600 User-Agent: KMail/1.8.3 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3823810.NppZfW53Ft"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200512311356.55543.kirk@strauser.com> X-Virus-Scanned: amavisd-new at honeypot.net Subject: Sudo running without a password X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 31 Dec 2005 19:57:00 -0000 --nextPart3823810.NppZfW53Ft Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline I'm using sudo-1.6.8.12_1 (the most recent version in ports) on my FreeBSD= =20 6.0-STABLE machine. I'm having the problem that any command I try to run=20 will execute as root regardless of what I enter for a password. Example: $ sudo -k # To clear the timestamp $ sudo whoami Password: root In the second stamp, I can give my real password, a fake password, an empty= =20 string, or ctrl-C - all with the same results. Here's my sudoers: #############################3 Defaults:nagios !syslog User_Alias DUMPADMINS =3D kirk Runas_Alias DUMPOP =3D operator Cmnd_Alias AMANDA =3D \ /usr/local/sbin/amdump, \ /usr/local/sbin/amstatus, \ /usr/local/sbin/amadmin, \ /usr/local/sbin/amcheck, \ /usr/local/sbin/amlabel, \ /usr/local/sbin/amflush, \ /usr/bin/mt Cmnd_Alias NAGIOS_PLUGINS =3D \ /usr/local/libexec/nagios/check_vinum_wrapper root ALL =3D (ALL) ALL %wheel ALL =3D (ALL) ALL nagios ALL =3D (root) NOPASSWD: NAGIOS_PLUGINS DUMPADMINS ALL =3D (DUMPOP) NOPASSWD: AMANDA cricket ALL =3D (root) NOPASSWD:/usr/local/sbin/mailerstats.py #############################3 I don't see anything in it that looks like it should prompt me for a passwo= rd,=20 then run with elevated privileges regardless of what I send. Any ideas? =2D-=20 Kirk Strauser --nextPart3823810.NppZfW53Ft Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQBDtuKH5sRg+Y0CpvERAi2BAJsHuSjYbFCoYCI/HQiYv//fH1qXkwCgog0l 48oc7guxBpnN90C+pwytZeU= =Qdaa -----END PGP SIGNATURE----- --nextPart3823810.NppZfW53Ft--