<html><head></head><body><div>On Fri, 2015-08-28 at 13:53 -0400, DJ-Pfulio wrote:On 08/28/2015 01:36 PM, DJ-Pfulio wrote:</div><div>
On ubuntu, either wheel or sudo are the group to be in to have sudo
escalation. Of course, you can use any group you like or just specify 1
account, without a group in the sudoers file.
Oh - and there is one exception for sudoedit - that is when editing the
sudoers files ... use visudo for that. If you use a non-GUI editor,
using sudo is fine - sudo vi file.txt It is the GUI tools that seem to
screw things up by saving settings/creating setting files when not asked
to do so. I've seen one system where someone was following a script and
at their first login, before running any other program did a sudo gedit
/etc/some-file-here and all their GUI settings were locked since root
owned ~/.conf from theig/ . It was bad.
</div><div><br></div><div><br></div><div>I need to dig more into how rhel gui sudo works. I think it uses PolicyKit. The places where I see it used are when downloading a custom RPM for installation (yes. from a trusted site) and it asks for a password to install it. The gui config manager will also ask for a password when unlocking printing config and network settings. And when doing system updates from the gui notifier.</div><blockquote type="cite"><pre>
_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org">Ale@ale.org</a>
<a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
</pre></blockquote><div class="-x-evo-signature-wrapper"><span><pre>--
James P. Kinney III
Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
http://heretothereideas.blogspot.com/
</pre></span></div></body></html>