From owner-freebsd-questions@FreeBSD.ORG Thu Mar 3 23:04:40 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4010A16A4CE for ; Thu, 3 Mar 2005 23:04:40 +0000 (GMT) Received: from post-23.mail.nl.demon.net (post-23.mail.nl.demon.net [194.159.73.193]) by mx1.FreeBSD.org (Postfix) with ESMTP id C45F743D53 for ; Thu, 3 Mar 2005 23:04:39 +0000 (GMT) (envelope-from albi@scii.nl) Received: from aseed.demon.nl ([83.160.138.119]:10046 helo=mail.aseed.antenna.nl) by post-23.mail.nl.demon.net with esmtp (Exim 4.43) id 1D6zN1-0005Z7-3c; Thu, 03 Mar 2005 23:04:39 +0000 Received: from http.aseed.antenna.nl (unknown [192.168.0.50]) by mail.aseed.antenna.nl (Postfix) with ESMTP id BCAB92841A7; Fri, 4 Mar 2005 00:06:09 +0100 (CET) Received: from localhost.localdomain (82-197-198-30.dsl.cambrium.nl [82.197.198.30]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by http.aseed.antenna.nl (Postfix) with ESMTP id 620B63802E; Fri, 4 Mar 2005 00:04:40 +0100 (CET) Date: Fri, 4 Mar 2005 00:04:30 +0100 From: "albi@scii.nl" To: Pietro Cerutti Message-Id: <20050304000430.23281834.albi@scii.nl> In-Reply-To: References: <2F1BC4E1DAFE0EE0733135BA@utd49554.utdallas.edu> X-Mailer: Sylpheed version 1.0.0 (GTK+ 1.2.10; i386-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: FreeBSD Subject: Re: sudo & su X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2005 23:04:40 -0000 On Thu, 3 Mar 2005 22:47:09 +0000 Pietro Cerutti wrote: > There isn't any NOPASSWD, but if I give the password the first time, > sudo doesn't ask for it anymore in the next 5 min or so... > see : man sudoers the timestamp_timeout section > I think I really misunderstood the purpose of sudo. I thought that it > was used to automatically login as root, give a command, and log back > out to user who invoked the command. more or less, yes > So what's the purpose of asking for the password of the actually > logged in user? with sudo you can allow normal users to do certain things without the need for sharing the root-password here are some examples : http://www.courtesan.com/sudo/man/sudoers.html#examples