Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Rather then editing the /etc/sudoers using visudo, this approach ensures that system upgrades will not overwrite your changes. Create a file, 01_bonsai_disable_password_auth using the visudo command to ensure proper permissions and locking 

Download File Using tscripts

Download tscripts,

Code Block
languagebash
cd ~
wget http://www.bonsaiframework.com/tscripts/01_enable_sudo_for_staff
sudo cp 01_enable_sudo_for_staff /etc/sudoers.d/
rm 01_enable_sudo_for_staff

 

Manual Method

If you want to create the file manually,

Code Block
languagebash
# CreatesLocks file, locks its and validates for syntax errors.
sudo visudo -f /etc/sudoers.d/01_bonsai_disable_password_auth

...

Code Block
languagebash
# Members of the staff group may gain root privileges.
%staff ALL=(ALL) ALL

 

Going forward, make sure to use visudo to edit the 01_bonsai_disable_password_auth file to ensure proper permissions and locking,

Naming Convention

You may want to understand the naming convention used here if you want to build your own. Otherwise, the examples are self-explanatory and have not encountered any issues.

...