In this lab, we will look at how to manage access to `sudo`. We will strengthen `sudo` security by removing unnecessary default settings and configure `sudo` to always require a password. Then, we’ll permit specific user accounts to use `sudo`.
*This course is not approved or sponsored by Red Hat.*
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Disable the Use of the `wheel` Group in the `sudoers` File
Comment out the following line in the
/etc/sudoersfile:%wheel ALL=(ALL) ALL- Provide Full `sudo` Access to `cloud_user`, `pbeesly`, and `jhalpert`
Add the following lines to the /etc/sudoers file:
cloud_user ALL=(ALL) ALL pbeesly ALL=(ALL) ALL jhalpert ALL=(ALL) ALL- Configure `sudo` to Require a Password Each Time the `sudo` Command Is Used
To require a password each time
sudois used, add the following line to the/etc/sudoersfile:Defaults timestamp_timeout=0
