Sudo

29-04-2021
 |  [RAND-100] - Comments



Unblock Youtube with SudoProxy free SSL web proxy. Use SudoProxy to unblock restricted websites in any country. Surf website anonymously hiding IP address and online identity with SudoProxy Free SSL web proxy. Sudo (su 'do') allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments. For more information. Type ' sudo dmesg -c' and then plug in the board to your machine and then type ' sudo dmesg -c' once again. Intel System Studio for Microcontrollers Getting Started for Linux North Korean workers are contracted with local construction companies through North Korean recruitment firms in Qatar, such as Sudo Construction, Gunmyung Construction. MySudo allows you to create and manage multiple Sudos, each with a phone number and email address, to use for signups, downloads, or anytime you need a private phone number and/or email address. Setting up a Sudo profile is as easy as selecting a phone number and choosing an email address. At a time when just about every interaction you have online or offline ties back to your mobile number.

sudo
Original author(s)Robert Coggeshall, Cliff Spencer
Developer(s)Todd C. Miller
Initial releaseAround 1980[1]
Stable release
1.9.6p1 / March 15, 2021; 37 days ago[2]
Repository
Written inC
Operating systemUnix-like
TypePrivilege authorization
LicenseISC-style[3]
Websitewww.sudo.ws

sudo (/suːduː/[4] or /ˈsuːdoʊ/[4][5]) is a program for Unix-like computer operating systems that allows users to run programs with the security privileges of another user, by default the superuser.[6] It originally stood for 'superuser do'[7] as the older versions of sudo were designed to run commands only as the superuser. However, the later versions added support for running commands not only as the superuser but also as other (restricted) users, and thus it is also commonly expanded as 'substitute user do'.[8][9] Although the latter case reflects its current functionality more accurately, sudo is still often called 'superuser do' since it is so often used for administrative tasks.

Unlike the similar command su, users must, by default, supply their own password for authentication, rather than the password of the target user. After authentication, and if the configuration file, which is typically located at /etc/sudoers, permits the user access, the system invokes the requested command. The configuration file offers detailed access permissions, including enabling commands only from the invoking terminal; requiring a password per user or group; requiring re-entry of a password every time or never requiring a password at all for a particular command line. It can also be configured to permit passing arguments or multiple commands.

History[edit]

Robert Coggeshall and Cliff Spencer wrote the original subsystem around 1980 at the Department of Computer Science at SUNY/Buffalo.[10] Robert Coggeshall brought sudo with him to the University of Colorado Boulder. Between 1986 and 1993, the code and features were substantially modified by the IT staff of the University of Colorado Boulder Computer Science Department and the College of Engineering and Applied Science, including Todd C. Miller.[10] The current version has been publicly maintained by OpenBSD developer Todd C. Miller since 1994,[10] and has been distributed under an ISC-style license since 1999.[10]

In November 2009 Thomas Claburn, in response to concerns that Microsoft had patented sudo,[11] characterized such suspicions as overblown.[12] The claims were narrowly framed to a particular GUI, rather than to the sudo concept.[13]

Design[edit]

Unlike the command su, users supply their personal password to sudo (if necessary) rather than that of the superuser or other account. This allows authorized users to exercise altered privileges without compromising secrecy of the other account's password. After authentication, and if the configuration file permits the user access, the system invokes the requested command. sudo retains the user's invocation rights through a grace period (typically 5 minutes) per pseudo terminal, allowing the user to execute several successive commands as the requested user without having to provide a password again.

As a security and auditing feature, sudo may be configured to log each command run. When a user attempts to invoke sudo without being listed in the configuration file, an exception indication is presented to the user indicating that the attempt has been recorded. The root user will be alerted via mail and an entry is recorded in the system.

Configuration[edit]

The file /etc/sudoers contains a list of users or user groups with permission to execute a subset of commands while having the privileges of the root user or another specified user. The program may be configured to require a password.[14]

Impact[edit]

In some system distributions, sudo has largely supplanted the default use of a distinct superuser login for administrative tasks, most notably in some Linux distributions as well as Apple's macOS.[15][16] This allows for more secure logging of admin commands and prevents some exploits.

RBAC[edit]

In association with SELinux, sudo can be used to transition between roles in role-based access control (RBAC).[17]

Tools and similar programs[edit]

visudo is a command-line utility that allows editing the sudo configuration file in a fail-safe manner. It prevents multiple simultaneous edits with locks and performs sanity and syntax checks.

The program runas provides similar functionality in Microsoft Windows, but it cannot pass current directories, environment variables or long command lines to the child. And while it supports running the child as another user, it does not support simple elevation. A true su and sudo for Windows that can pass all of that state information and start the child either elevated or as another user (or both) is included with Hamilton C shell.[18][19]

Graphical user interfaces exist for sudo – notably gksudo – but are deprecated in Debian and no longer included in Ubuntu.[20][21] Other user interfaces are not directly built on sudo, but provide similar temporary privilege elevation for administrative purposes, such as pkexec in Unix-like operating systems, User Account Control in Microsoft Windows and Mac OS X Authorization Services.[22]

doas, available since OpenBSD 5.8 (October 2015), has been written in order to replace sudo in the OpenBSD base system, with the latter still being made available as a port.[23]

See also[edit]

References[edit]

  1. ^Miller, Todd C. 'A Brief History of Sudo'. Retrieved 15 November 2018.
  2. ^'Sudo News'. Retrieved 16 March 2021.
  3. ^Todd C. Miller (2011-06-17). 'Sudo License'. sudo.ws. Retrieved 2011-11-17.
  4. ^ abMiller, Todd C. 'Troubleshooting tips and FAQ for Sudo'. Retrieved 2009-11-20.
  5. ^'How do YOU pronounce 'sudo'?'. Ars Technica.
  6. ^Cohen, Noam (May 26, 2008). 'This Is Funny Only if You Know Unix'. The New York Times. Retrieved April 9, 2012.
  7. ^https://pthree.org/2009/12/31/the-meaning-of-su/
  8. ^'Sudo - ArchWiki'(MediaWiki). wiki.archlinux.org.
  9. ^Haeder, A.; Schneiter, S. A..; Pessanha, B. G.; Stanger, J. LPI Linux Certification in a Nutshell. O'Reilly Media, 2010. p. 409. ISBN978-0596804879.
  10. ^ abcdMiller, Todd C. 'A Brief History of Sudo'. Retrieved 2021-02-08.
  11. ^Lilly, Paul. 'Microsoft has Patented 'sudo.' Yes, the Command'. Retrieved 2009-11-13.
  12. ^Thomas, Claburn (2009-11-16). 'Does New Microsoft Patent Infringe On Unix Program Sudo? Some in the open source community suspicious of Microsoft's intent'. Dark Reading. Retrieved 2010-11-29. A patent granted to Microsoft (NSDQ: MSFT) has stirred up worry that world's largest software company wants to claim Unix's 'sudo' as its own. [...] In short, suspicions about this patent are overblown.
  13. ^Eaton, Nick (November 12, 2009). 'Did Microsoft just sneakily patent an open-source tool?'. seattlepi.com. Retrieved April 24, 2011.
  14. ^'Sudo Manual'. Retrieved 2021-02-08.
  15. ^'RootSudo'. Community Ubuntu Documentation. help.ubuntu.com. 2011-11-08. Retrieved 2011-11-17.
  16. ^'Top Ten Mac OS X Tips for Unix Geeks'. MacDevCenter.com. Retrieved 2011-11-17.
  17. ^'SELinux Lockdown Part Five: SELinux RBAC'. Retrieved 2012-11-17.
  18. ^'su'. Hamilton Laboratories. Retrieved August 17, 2015.
  19. ^'Predefined aliases: sudo'. Hamilton Laboratories. Retrieved August 17, 2015.
  20. ^Bicha, Jeremy (December 30, 2017). 'Remove gksu from Ubuntu'. Canonical, which owns Launchpad. Retrieved January 10, 2020.
  21. ^'Software Packages in 'bionic''. Canonical. Retrieved January 10, 2020.
  22. ^'Introduction to Authorization Services Programming Guide'. developer.apple.com. Retrieved 2011-11-17.
  23. ^'sudo-1.8.26 – execute a command as another user'. OpenBSD ports. 2018-11-16.

External links[edit]

  • Official website
Retrieved from 'https://en.wikipedia.org/w/index.php?title=Sudo&oldid=1012511241'
Sudo list directories

What is Sudo?

Sudo (su 'do') allows a system administrator to delegate authorityto give certain users (or groups of users) the ability to run some(or all) commands as root or another user while providing an audittrail of the commands and their arguments.For more information, see theintroduction to Sudo.Sudo is Sudokufree software, distributed under anISC-style license.

Releases

The current stable release issudo 1.9.6p1,released on March 15, 2021.
The current legacy release issudo 1.8.32,released on February 9, 2021.

See the download page for a list ofbinary packages.

News

[2021-03-15]Sudo version 1.9.6p1 released. Major changes in sudo 1.9.6p1.

[2021-03-13]Sudo version 1.9.6 released. Major changes in sudo 1.9.6.

[2021-02-09]Sudo version 1.8.32 released. Major changes in sudo 1.8.32. This version fixes CVE-2021-3156 (also known as Baron Samedit) which could allow an attacker to obtain root privileges even if they are not listed in the sudoers file.

[2021-01-26]Sudo version 1.9.5p2 released. Major changes in sudo 1.9.5p2. This version fixes CVE-2021-3156 (also known as Baron Samedit) which could allow an attacker to obtain root privileges even if they are not listed in the sudoers file.

[2021-01-11]Sudo version 1.9.5p1 released. Major changes in sudo 1.9.5p1.

[2021-01-11]Sudo version 1.9.5 released. Major changes in sudo 1.9.5. This version fixes a potential security issue in sudoedit when sudo is built with SELinux support such that a user may be able to set the owner of an arbitrary file to that of the target user (e.g. root).

[2020-12-20]Sudo version 1.9.4p2 released. Major changes in sudo 1.9.4p2.

[2020-12-17]Sudo version 1.9.4p1 released. Major changes in sudo 1.9.4p1.

[2020-11-30]Sudo version 1.9.4 released. Major changes in sudo 1.9.4.

[2020-10-28]5 new sudo features you need to know in 2020, an article by Peter Czanik at opensource.com, highlights the new features in sudo 1.9.

Command

[2020-09-23]Sudo version 1.9.3p1 released. Major changes in sudo 1.9.3p1.

[2020-09-21]Sudo version 1.9.3 released. Major changes in sudo 1.9.3.

[2020-07-22]Sudo version 1.9.2 released. Major changes in sudo 1.9.2.

[2020-06-19]Sudo version 1.9.1 released. Major changes in sudo 1.9.1.

[2020-06-19]Sudo version 1.8.31p2 released. Major changes in sudo 1.8.31p2.

[2020-05-12]Sudo version 1.9.0 released. Major changes in sudo 1.9.0.

[2020-03-14]Sudo version 1.8.31p1 released. Major changes in sudo 1.8.31p1.

[2020-03-07] Sudo 1.9 presentation at SCaLE 18x. The slides and video from the presentation are available.

[2020-01-30]Sudo version 1.8.31 released. Major changes in sudo 1.8.31. This version fixes a potential security issue that can lead to a buffer overflow if the pwfeedback option is enabled in sudoers.

[2019-12-31]Sudo version 1.8.30 released. Major changes in sudo 1.8.30.

[2019-10-28]Sudo version 1.8.29 released. Major changes in sudo 1.8.29.

[2019-10-16]Sudo version 1.8.28p1 released. Major changes in sudo 1.8.28p1.

[2019-10-14]Sudo version 1.8.28 released. Major changes in sudo 1.8.28. This version fixes a potential security issue where a sudo user may be able to run a command as root when the Runas specification explicitly disallows root access.

[2019-09-12] There is a new Sudo Blog. You can expects articles about some of sudo's new and less well-known features, upcoming sudo talks and more.

[2019-09-03] The second edition of Sudo Mastery by Michael W. Lucas is now available.

[2019-01-11]Sudo version 1.8.27 released. Major changes in sudo 1.8.27.

[2018-11-13]Sudo version 1.8.26 released. Major changes in sudo 1.8.26.

[2018-09-13]Sudo version 1.8.25p1 released. Major changes in sudo 1.8.25p1.

[2018-09-03]Sudo version 1.8.25 released. Major changes in sudo 1.8.25.

[2018-08-18]Sudo version 1.8.24 released. Major changes in sudo 1.8.24.

Sudoku

[2018-04-30]Sudo version 1.8.23 released. Major changes in sudo 1.8.23.

[2018-01-16]Sudo version 1.8.22 released. Major changes in sudo 1.8.22.

[2017-09-07]Sudo version 1.8.21p2 released. Major changes in sudo 1.8.21p2.

Puzzles

Sudowoodo

[2017-09-01]Sudo version 1.8.21p1 released. Major changes in sudo 1.8.21p1.

[2017-08-23]Sudo version 1.8.21 released. Major changes in sudo 1.8.21.

[2017-05-31]Sudo version 1.8.20p2 released. Major changes in sudo 1.8.20p2.

[2017-05-30]Sudo version 1.8.20p1 released. Major changes in sudo 1.8.20p1. This version fixes a potential security issue that may allow a user to overwrite an arbitrary file on Linux systems.

[2017-05-10]Sudo version 1.8.20 released. Major changes in sudo 1.8.20.

More news...

Sudoku Online

Help Support Sudo

Your donations will help ensure future sudo development by defraying thecosts of web hosting and domain registration.