You're right, sorry :-) First case (fresh sudo 1st time): 10:38:32 markus@susem:[~] $ sudo echo hi [sudo] password for markus: sudo: PERM_ROOT: setresuid(0, -1, -1): Operation not permitted sudo: unable to send audit message: Operation not permitted sudo: setuid(0): Operation not permitted sudo: unable to set supplementary group IDs: Operation not permitted sudo: unable to change to runas uid (0, 0): Operation not permitted sudo: unable to execute /usr/bin/echo: Operation not permitted 10:38:37 markus@susem:[~] $ sudo echo hi hi Wrong password: 10:39:50 markus@susem:[~] $ sudo echo hi [sudo] password for markus: Sorry, try again. [sudo] password for markus: sudo: unable to send audit message: Operation not permitted sudo: PERM_ROOT: setresuid(0, -1, -1): Operation not permitted sudo: 1 incorrect password attempt