...
Rather then editing the /etc/sudoers using visudo, this approach ensures that system upgrades will not overwrite your changes. Create a file, 01_bonsai_disable_password_auth using the visudo command to ensure proper permissions and locking
Download File Using tscripts
Download tscripts,
Code Block | ||
---|---|---|
| ||
cd ~
wget http://www.bonsaiframework.com/tscripts/01_enable_sudo_for_staff
sudo cp 01_enable_sudo_for_staff /etc/sudoers.d/
rm 01_enable_sudo_for_staff |
Manual Method
If you want to create the file manually,
Code Block | ||
---|---|---|
| ||
# CreatesLocks file, locks its and validates for syntax errors. sudo visudo -f /etc/sudoers.d/01_bonsai_disable_password_auth |
...
Code Block | ||
---|---|---|
| ||
# Members of the staff group may gain root privileges. %staff ALL=(ALL) ALL |
Going forward, make sure to use visudo to edit the 01_bonsai_disable_password_auth file to ensure proper permissions and locking,
Naming Convention
You may want to understand the naming convention used here if you want to build your own. Otherwise, the examples are self-explanatory and have not encountered any issues.
...