Date: Fri, 30 Jul 2010 21:48:03 -0400 From: Michael Toth <freebsd.mtoth@queldor.net> To: freebsd-questions@freebsd.org Subject: Re: sudo -K/-k ineffective Message-ID: <4C5380D3.2030403@queldor.net> In-Reply-To: <AANLkTindhsSOUNT3dTrpSBTU%2BEgSvi%2BxDRfmbn9fn=Jq@mail.gmail.com> References: <AANLkTikibNvt9OAO_Cio2RYce7609MgePijEhOzg9fNv@mail.gmail.com> <AANLkTindhsSOUNT3dTrpSBTU%2BEgSvi%2BxDRfmbn9fn=Jq@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 07/30/2010 06:00 PM, Chris Rees wrote:
> It's by design. There's a timeout that you can set, try man sudo.
>
> Chris
>
> --------
Chris,
That is not by design.
sudo -K should remove the timestamp
--
sudo
-K The -K (sure kill) option is like -k except that it
removes
the user's time stamp entirely and may not be used in
conjunction with a command or other option. This option
does not require a password.
--
Gurpreet,
I am not sure if this is a known bug, I was not able to duplicate
this on Freebsd 7.2 running sudo 1.6.9p20
>
> Sorry for top-posting, Android won't let me quote, but K-9 can't yet do
> threading.
>
> On 30 Jul 2010 21:43, "me"<gurpreet007@gmail.com> wrote:
>
> Hi,
>
> Upon doing sudo<some-command> as a normal user (non-root), sudo asks for
> password only once, subsequent invocations of sudo doesn't ask for password
> - even though I do sudo -k or sudo -K in between.
> Although sudo starts asking for password after the time stamp expiry.
>
> in other words:
>
> % sudo mkdir /newdir
> <sudo asks for password authentication, creates the directory after
> successful authentication>
>
> % sudo -k
>
> % sudo -K
>
> % sudo mkdir /another_new_dir
> <sudo don't ask for password authentication, and creates the directory>
>
> In sudoers file, NOPASSWD is NOT set.
> here is my sudeors file: http://pastebin.com/WFnXCLE1
>
> Output of "uname -a":
> FreeBSD foo.bar 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Mon Jul 19 02:55:53 UTC
> 2010
> root@almeida.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
>
> Is this known bug? If not, then it might have security implications.
>
> Regards,
> Gurpreet Singh
> --
> Life is not fair. Get used to it. .... Be nice to nerds. Chances are you'll
> end up working for one.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4C5380D3.2030403>