linux 中如何给普通用户添加sudo权限
001、普通用户一般没有sudo权限
[zhangsan01@pc1 ~]$ ls [zhangsan01@pc1 ~]$ yum install httpd ## 直接无法调用yum仓库 Loaded plugins: fastestmirror, langpacks You need to be root to perform this command. [zhangsan01@pc1 ~]$ sudo yum install httpd ## sudo 需要输入sudo密码 We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for zhangsan01: ## 说明用户不在sudoers 文件中 zhangsan01 is not in the sudoers file. This incident will be reported.
002、将用户zhangsan01添加至sudoersfile文件中
以root身份在终端输入如下命令：visudo
找到该行： root ALL=(ALL) ALL，并在其下面增加如下：
zhangsan01 ALL=(ALL) ALL， 然后保存退出。
## ## Allow root to run any commands anywhere root ALL=(ALL) ALL zhangsan01 ALL=(ALL) ALL ## 增加改行，表示zhangsan01用户可以使用所有的sudo权限 ## Allows members of the 'sys' group to run networking, software, ## service management apps and more. # %sys ALL = NETWORKING, SOFTWARE, SERVICES, STORAGE, DELEGATING, PROCESSES, LOCATE, DRIVERS ## Allows people in group wheel to run all commands %wheel ALL=(ALL) ALL ## Same thing without a password # %wheel ALL=(ALL) NOPASSWD: ALL ## Allows members of the users group to mount and unmount the ## cdrom as root # %users ALL=/sbin/mount /mnt/cdrom, /sbin/umount /mnt/cdrom ## Allows members of the users group to shutdown this system # %users localhost=/sbin/shutdown -h now ## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment) :wq! ## 保存退出
003、使用普通用户zhangsan01测试sudo权限
a、测试 sudo yum
[zhangsan01@pc1 ~]$ ls [zhangsan01@pc1 ~]$ whoami ## 列出当前用户 zhangsan01 [zhangsan01@pc1 ~]$ sudo yum install httpd ## zhangsan01调用sudo yum命令 [sudo] password for zhangsan01: Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile * base: mirrors.qlu.edu.cn * extras: mirrors.qlu.edu.cn * updates: mirrors.qlu.edu.cn Resolving Dependencies --> Running transaction check ---> Package httpd.x86_64 0:2.4.6-99.el7.centos.1 will be installed --> Finished Dependency Resolution Dependencies Resolved
b、测试sudo ls /root/
[zhangsan01@pc1 ~]$ whoami ## 列出当前用户 zhangsan01 [zhangsan01@pc1 ~]$ ls /root/ ## 直接列出 /root/失败 ls: cannot open directory /root/: Permission denied [zhangsan01@pc1 ~]$ sudo ls /root/ ## 使用 sudo列出 /root/ anaconda3 Desktop Downloads Music Public Videos anaconda-ks.cfg Documents initial-setup-ks.cfg Pictures Templates
。
004、仅对zhangsan01开放部分的root权限
[root@pc1 home]# vim /etc/sudoers ## 编辑配置文件 ## Allow root to run any commands anywhere root ALL=(ALL) ALL zhangsan01 ALL=(ALL) /bin/yum ## 增加该行，对zhangsan01仅仅添加了/bin/yum以root身份执行的权限 ## Allows members of the 'sys' group to run networking, software, ## service management apps and more. # %sys ALL = NETWORKING, SOFTWARE, SERVICES, STORAGE, DELEGATING, PROCESSES, LOCATE, DRIVERS ## Allows people in group wheel to run all commands %wheel ALL=(ALL) ALL ## Same thing without a password # %wheel ALL=(ALL) NOPASSWD: ALL ## Allows members of the users group to mount and unmount the ## cdrom as root # %users ALL=/sbin/mount /mnt/cdrom, /sbin/umount /mnt/cdrom ## Allows members of the users group to shutdown this system # %users localhost=/sbin/shutdown -h now ## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment) #includedir /etc/sudoers.d :wq! ## 保存退出
005、测试zhangsan01此时的sudo权限
a、测试sudo yum
[zhangsan01@pc1 ~]$ sudo yum install httpd ## 可以正常运行 sudo yum [sudo] password for zhangsan01: Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile * base: mirrors.tuna.tsinghua.edu.cn * extras: mirror.lzu.edu.cn * updates: mirrors.tuna.tsinghua.edu.cn Resolving Dependencies --> Running transaction check ---> Package httpd.x86_64 0:2.4.6-99.el7.centos.1 will be installed --> Finished Dependency Resolution Dependencies Resolved
b、测试zhangsan01 其他的sudo权限，比如sudo ls /root/
[zhangsan01@pc1 ~]$ whoami zhangsan01 [zhangsan01@pc1 ~]$ sudo ls /root/ ## 不能正常执行，pc1是主机名称 Sorry, user zhangsan01 is not allowed to execute '/bin/ls /root/' as root on pc1. [zhangsan01@pc1 ~]$ sudo useradd newuser01 ## 不能正常执行； 说明zhangsan01没有除了sudo yum以外其他的sudo权限了 Sorry, user zhangsan01 is not allowed to execute '/sbin/useradd newuser01' as root on pc1.
。
