We help IT Professionals succeed at work.

Creating a user in Linux with root privliges

fais79
fais79 asked
on
10 Comments
1 Solution
327 Views
Last Modified: 2013-02-16
Hello,

I have created an admin group called 'admins' and replaced %wheel in sudoers under /etc with this group.. I have created a user 'sysadmin' and added him to the admins group.

As a result of above the 'sysadmin' account is able to execute all commands just like root however, I am not able to write to any of the directories in Linux e.g. /tmp

Are there any additional steps I need to perform??  Please advise.

Thanks
Comment
Watch Question

View Solution Only

woolmilkporc
CERTIFIED EXPERT
Most Valuable Expert 2013
Top Expert 2013

Commented:
Are you aware that you (sysadmin) will have to prefix all commands with "sudo" in order to execute them with root privileges?

This includes of course all commands which try to write to a directory.

sudo touch /tmp/testfile

for example.

If you left your sudoers entry at the default "ALL = (ALL) ALL" you must enter your (sysadmin's) password before a command is executed.
fais79

Author

Commented:
Oh ok, I didn't know that!  Is there an alternative and better way of achieving what I am trying to do above??  i.e. creating an alternative user with root privliges allowing to execute all root commands as well as have access to all files folders in Linux.. Just like it can be done by creating a user in Windows and adding to local Administrators group.


Thanks,
fais79

Author

Commented:
I only edited the sudoers file by replacing %wheels with %admins group and didn't change anything else..
woolmilkporc
CERTIFIED EXPERT
Most Valuable Expert 2013
Top Expert 2013

Commented:
Yes, that's possible by giving this user the UID "0", but it's not recommended, because it can create a big security risk.

Changes made by this privileged user can in no way be distinguished from those made by the original root user, whereas "sudo" keeps a log of the commands issued so you can at least keep track of these activities.
fais79

Author

Commented:
Thanks for the advice, really appreciate it!

So basically what I have done so far is engough.  I don't have to make any further changes and just need to make sure that my colleague who will be using the sysadmin account uses sudo before all commands??
woolmilkporc
CERTIFIED EXPERT
Most Valuable Expert 2013
Top Expert 2013

Commented:
Yes, correct!

And if you (or they) find it annoying having to enter one's password then change

%admins         ALL = (ALL) ALL

to

%admins         ALL = (ALL) NOPASSWD: ALL
fais79

Author

Commented:
The reason I wanted an alternative account so that all the actions are logged so I think I rather leave it at:

%admins         ALL = (ALL) ALL

I will try this tomorrow and update u!

Many thanks,
Tintin
CERTIFIED EXPERT
Top Expert 2007

Commented:
If the user types in

sudo -s

they effectively get a root shell.
fais79

Author

Commented:
Tintin,

I tried sudo -s and it shifts to root shell hence, able to write to all folders which is what I want.  However, how can I log sysadmin's actions which are required for auditing purposes??

Thanks,
CERTIFIED EXPERT
Most Valuable Expert 2013
Top Expert 2013
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.

View Solution