[opensuse] sudoers ignored in 11.2
it seems that since 11.0 sudoers is ignored. I copied the sudoers file from 10.3 to the 11.x systems and even edited new ones in yast>sudo but it is still ignored without errors. Format is identical to examples shown in how-to's, online and in books. There seems to be no other config file that controls how sudoers is used. Is there something else to look at, configure or whatnot? tia == jd -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 06/11/2010 11:38 AM, j debert wrote:
I copied the sudoers file from 10.3 to the 11.x systems and even edited new ones in yast>sudo but it is still ignored without errors.
at the beginning of the sudoers file: # sudoers file. # # This file MUST be edited with the 'visudo' command as root. # Failure to use 'visudo' may result in syntax or file permission errors # that prevent sudo from running. # # See the sudoers man page for the details on how to write a sudoers file. # Did u do that? also surely there's an error in a log somewhere if it's not working. -- Michael S. Dunsavage -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 06/11/2010 10:14 AM, Michael S. Dunsavage wrote:
On 06/11/2010 11:38 AM, j debert wrote:
I copied the sudoers file from 10.3 to the 11.x systems and even edited new ones in yast>sudo but it is still ignored without errors.
at the beginning of the sudoers file:
# sudoers file. # # This file MUST be edited with the 'visudo' command as root. # Failure to use 'visudo' may result in syntax or file permission errors # that prevent sudo from running. # # See the sudoers man page for the details on how to write a sudoers file. #
Did u do that?
Oh, yeah. I forgot to mention that it was also done in visudo. yast can edit it as well.
also surely there's an error in a log somewhere if it's not working.
No errors. == jd -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
It looks like the sudo binary is not correct: /usr/bin/sudo size and checksums don't match the binary from the sudo-12.7.2-2.2.1.i586 rpm. trying to find out what happened. == jd -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2010-06-12 05:14, j debert wrote:
It looks like the sudo binary is not correct: /usr/bin/sudo size and checksums don't match the binary from the sudo-12.7.2-2.2.1.i586 rpm.
trying to find out what happened.
You mean you have installed sudo from that rpm and version, and the binary does not match? Then perhaps you have been hacked :-? - -- Cheers / Saludos, Carlos E. R. (from 11.2 x86_64 "Emerald" GM (Elessar)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAkwTTowACgkQU92UU+smfQXdugCff/3xfvjxmwxI6ksUqqVEkEru t3UAnAppi63RpBGO+O+2DucG9h2kaEmz =jCRZ -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sat, Jun 12, 2010 at 11:08:28AM +0200, Carlos E. R. wrote:
On 2010-06-12 05:14, j debert wrote:
It looks like the sudo binary is not correct: /usr/bin/sudo size and checksums don't match the binary from the sudo-12.7.2-2.2.1.i586 rpm.
trying to find out what happened.
You mean you have installed sudo from that rpm and version, and the binary does not match? Then perhaps you have been hacked :-?
rpm -V sudo to see if the checksums match with the RPM db. If they do not, you are likely infected by something. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2010-06-12 11:19, Marcus Meissner wrote:
On Sat, Jun 12, 2010 at 11:08:28AM +0200, Carlos E. R. wrote:
On 2010-06-12 05:14, j debert wrote:
It looks like the sudo binary is not correct: /usr/bin/sudo size and checksums don't match the binary from the sudo-12.7.2-2.2.1.i586 rpm.
trying to find out what happened.
You mean you have installed sudo from that rpm and version, and the binary does not match? Then perhaps you have been hacked :-?
rpm -V sudo to see if the checksums match with the RPM db.
If they do not, you are likely infected by something.
I thought of that, too, but I had doubts: how reliable is that check when a system could be compromised? - -- Cheers / Saludos, Carlos E. R. (from 11.2 x86_64 "Emerald" GM (Elessar)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAkwThmMACgkQU92UU+smfQVfiwCcDMaW+7QTC31pRad1gE0PL8iG DdYAoI3GJUQrQyeNxH5UmNH55u60HB4Y =RQQi -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hello, On Sat, 12 Jun 2010, Carlos E. R. wrote:
On 2010-06-12 11:19, Marcus Meissner wrote: [..]
rpm -V sudo to see if the checksums match with the RPM db. [..] I thought of that, too, but I had doubts: how reliable is that check when a system could be compromised?
Try: rpm -pV http://ftp3.gwdg.de/pub/opensuse/update/11.2/rpm/i586/sudo-1.7.2-2.2.1.i586.... It's just a 'random' but well known mirror, as rpm doesn't follow redirections, so you can't use download.opensuse.org URLs directly. Find other/closer mirrors by using wget and aborting as soon as the redirected-URL is shown and C&P that URL. HTH, -dnh -- An NT server can be run by an idiot, and usually is. -- Tom Holub, a.h.b-o-i -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (5)
-
Carlos E. R. -
David Haller -
j debert -
Marcus Meissner -
Michael S. Dunsavage