SUDO(8) (System Manager's Manual) (NAME) sudo, sudoedit - (SYNOPSIS) sudo -h | -K | -k | -V sudo -v [-ABkNnS] [-g group] [-h host] [-p prompt] [-u user] sudo -l [-ABkNnS] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command [arg ...]] sudo [-ABbEHnPS] [-C num] [-D directory] [-g group] [-h host] [-p prompt] [-R directory] [-r role] [-t type] [-T timeout] [-u user] [VAR=value] [-i | -s] [command [arg ...]] sudoedit [-ABkNnS] [-C num] [-D directory] [-g group] [-h host] [-p prompt] [-R directory] [-r role] [-t type] [-T timeout] [-u user] file ... (DESCRIPTION) sudo command () (superuser) (security policy) . (not effective - ) . sudo (auditing) / (I/O logging) . (front-end) sudo . sudoers /etc/sudoers LDAP . Plugins . sudo . . sudo . sudoers 0 . (credential caching) sudo . sudoers 15 . timestamp_type timestamp_timeout sudoers(5) . sudo -v command . sudo (syntax errors) . sudoers(5) visudo(8) . sudoedit -e ( ) . sudo . I/O command . (OPTIONS) : -A, --askpass sudo . -A (askpass) ( ) . SUDO_ASKPASS . sudo.conf(5) askpass . : # Path to askpass helper program Path askpass /usr/X11R6/bin/ssh-askpass askpass sudo . -B, --bell (bell) . askpass . -b, --background command . (shell job control) sudo . command . -C num, --close-from=num num command . . sudo command . . sudoers -C closefrom_override . -D directory, --chdir=directory command directory . . -E, --preserve-env . . --preserve-env=list . . . -e, --edit file command . "sudoedit" . : 1. . 2. . sudoers SUDO_EDITOR VISUAL EDITOR ( ) . SUDO_EDITOR VISUAL EDITOR editor sudoers(5) . 3. . : o ( 1.8.15 ). o root ( 1.8.16 ). o root ( 1.8.16 ). (device special files) . . command sudo . . sudo . -g group, --group=group command group . group (GID) `#' ( `#0' GID 0). command GID `#' (`\') . -u command . group . sudoers -P -g . -H, --set-home HOME . . -h, --help . -h host, --host=host command command host . sudoers command . -l . -i, --login (login shell) . .profile .bash_profile .login . command -c . command arg ( ) (`\') . command . sudo . command . command . Command environment sudoers(5) -i command sudoers . -K, --remove-timestamp -k . sudo . -K command . . . -k, --reset-timestamp command . sudo . sudoers ( ) . -k sudo . timestamp_type sudoers(5) . sudo .logout . command sudo . sudo ( ) . . -l, --list command ( user -U) . . command command arg . command sudo 1 . -N, --no-update . -k . ( ) : sudo -Nnv . -n, --non-interactive . command sudo . -P, --preserve-groups . sudoers . . -p prompt, --prompt=prompt . (`%') sudoers : %H ( fqdn sudoers(5) ) %h %p ( rootpw targetpw runaspw sudoers(5) ) %U command ( root -u ) %u %% `%' `%' SUDO_PROMPT . PAM PAM passprompt_override sudoers . -R directory, --chroot=directory command directory (: chroot(8)). . -r role, --role=role command SELinux role . -S, --stdin . -s, --shell SHELL ( ) . command -c . command arg ( ) (`\') . command . command . -t type, --type=type command SELinux type . type . -U user, --other-user=user -l user . . sudoers -U root "list" user command root user . -T timeout, --command-timeout=timeout (timeout) command . command command . . sudoers . -u user, --user=user command ( root) . user (UID) `#' ( `#0' UID 0). command UID `#' (`\') . UID . sudoers targetpw UID . . -V, --version sudo . root -V configure sudo . -v, --validate . sudoers sudo 15 command . . -- -- sudo . command . . sudo . command sudo VAR=value LD_LIBRARY_PATH=/usr/local/pkg/lib. . sudoers . setenv sudoers command SETENV command ALL . sudoers(5) . (COMMAND EXECUTION) sudo command command . ( -P ). : o (user-ID) o (group-ID) o o ( ) o o (umask) o SELinux o ( nice) (Process model) sudo command . I/O / ("pty") fork(2) sudo monitor () . monitor pty fork(2) execve(2) command . monitor (job control) pty command . (suspend) (resume) command . monitor command POSIX " (orphaned process group)" . command monitor command sudo . command sudo command close close . pty sudo fork(2) execve(2) command . sudo command command close close . close sudo fork(2) command . sudoers close I/O pty SELinux command pam_session pam_setcred . pam_session pam_setcred PAM . PAM close PAM . command . (Signal handling) command sudo sudo command . SIGINT SIGQUIT command pty . SIGINT command control-C . SIGSTOP SIGKILL command . command sudo SIGSTOP SIGTSTP . sudo command . command . reboot(8) SIGTERM . SIGTERM sudo reboot(8) . command sudo command . reboot(8) shutdown(8) sudo reboot(8) shutdown(8) system() ( command ) exec() . (Plugins) Plugin sudo.conf(5) . (dynamic shared objects) ( ) sudo . sudo.conf(5) Plugin sudo sudoers(5) I/O . /etc/sudo.conf sudo.conf(5) sudo sudo_plugin(5) . (EXIT VALUE) command sudo . command sudo command . -l command sudo ( ) sudo 0 . command -l 0 command 1 . / command sudo 1 . . sudo PATH stat(2) . ( .) . stat(2) "permission denied" automounter PATH . (SECURITY NOTES) sudo command . (command spoofing) sudo command PATH "." "" ( ) ( PATH ). PATH sudo . sudo . command command . sudo command . `sudo su' `sudo sh' command sudo . command (shell escapes) ( ). I/O / command command . command sudo command root . Preventing shell escapes sudoers(5) . sudo (core dumps) ( command ). set-user-ID core dump . sudo "disable_coredump" false sudo.conf(5) : Set disable_coredump false sudo.conf(5) . (ENVIRONMENT) sudo . command . EDITOR -e (sudoedit) SUDO_EDITOR VISUAL . MAIL -i env_reset sudoers ( MAIL env_keep ) . HOME -i -H -s set_home sudoers always_set_home sudoers env_reset sudoers HOME env_keep . LOGNAME -i set_logname sudoers env_reset sudoers ( LOGNAME env_keep ) . PATH (override) . SHELL -s . SUDO_ASKPASS -A . SUDO_COMMAND command sudo arg . arg 4096 . SUDO_EDITOR -e (sudoedit). SUDO_GID (GID) sudo . SUDO_PROMPT -p . SUDO_PS1 PS1 . SUDO_UID (UID) sudo . SUDO_USER sudo . USER LOGNAME . VISUAL -e (sudoedit) SUDO_EDITOR . (FILES) /etc/sudo.conf (front-end) sudo (EXAMPLES) . : $ sudo ls /usr/local/protected yaz ~yaz root (export) : $ sudo -u yaz ls ~yaz index.html www: $ sudoedit -u www ~www/htdocs/index.html root adm : $ sudo -g adm more /var/log/syslog jim : $ sudoedit -u jim -g audio ~jim/sound.txt : $ sudo shutdown -r +15 "quick reboot" /home. commands `cd' : $ sudo sh -c "cd /home ; du -s * | sort -rn > USAGE" (DIAGNOSTICS) sudo : editing files in a writable directory is not permitted sudoedit . (race condition) . sudoedit_checkdir sudoers(5) . editing symbolic links is not permitted sudoedit . sudoedit_follow sudoers(5) . effective uid is not 0, is sudo installed setuid root? sudo root . sudo root set-user-ID . `nosuid' (mount) NFS uid 0 uid . effective uid is not 0, is sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges? sudo root . sudo root . sudo `nosuid' NFS uid 0 uid . fatal error, unable to load plugins sudo.conf(5) . invalid environment variable name -E (`=') . -E . no password was provided sudo . ( -S ) /dev/null . a terminal is required to read the password sudo . sudo -S askpass sudo.conf(5) SUDO_ASKPASS . no writable temporary directory found sudoedit . The "no new privileges" flag is set, which prevents sudo from running as root. sudo "no new privileges" . set-user-ID sudo . sudo . . sudo must be owned by uid 0 and have the setuid bit set sudo root . sudo . root set-user-ID . sudoedit is not supported on this platform sudoedit . timed out reading password ( 5 ) . you do not exist in the passwd database passwd . you may not specify environment variables in edit mode command . . (CAVEATS) commands sudo root . ( ) command (shell escapes) sudo . noexec sudoers(5) . `cd' sudo : $ sudo cd /usr/local/protected command ( ) . -D command directory . sudo set-user-ID ( /dev/fd/ set-user-ID ). (HISTORY) sudo HISTORY.md sudo (https://www.sudo.ws/about/history/) . (AUTHOR) sudo : Todd C. Miller sudo CONTRIBUTORS.md sudo (https://www.sudo.ws/about/contributors/) . (REPORTING BUGS) sudo https://bugzilla.sudo.ws/ . (SUPPORT) sudo-users https://www.sudo.ws/mailman/listinfo/sudo-users . (DISCLAIMER) sudo " (AS IS)" . LICENSE.md sudo https://www.sudo.ws/about/license/ . (COPYRIGHT) (C) 1994-1996, 1998-2005, 2007-2023 Todd C. Miller . ISC . LICENSE.md sudo https://www.sudo.ws/about/license/ . (SEE ALSO) su(1), stat(2), login_cap(3), passwd(5), sudo.conf(5), sudo_plugin(5), sudoers(5), sudoers_timestamp(5), sudoreplay(8), visudo(8) Sudo 1.9.13p3 January 16, 2023 SUDO(8)