fbpx
Wikipedia

sudo

January 01, 1970

"SUDO" redirects here. For the non-profit organization, see Sudan Social Development Organization. For other uses, see Sudo (disambiguation).

sudo (/suːduː/[4]) is a program for Unix-like computer operating systems that enables users to run programs with the security privileges of another user, by default the superuser.[5] It originally stood for "superuser do",[6] as that was all it did, and it is its most common usage;[7] however, the official Sudo project page lists it as "su 'do' ".[8] The current Linux manual pages for su define it as "substitute user",[9] making the correct meaning of sudo "substitute user, do", because sudo can run a command as other users as well.[10][11]

sudo
The sudo command in a terminal
Original author(s)Robert Coggeshall, Cliff Spencer
Developer(s)Todd C. Miller
Initial releaseAround 1980[1]
Stable release
1.9.15 [2] / 6 November 2023; 5 months ago (6 November 2023)
Repository
  • github.com/sudo-project/sudo
Written inC
Operating systemUnix-like
TypePrivilege authorization
LicenseISC-style[3]
Websitewww.sudo.ws

Unlike the similar command su, users must, by default, supply their own password for authentication, rather than the password of the target user. After authentication, and if the configuration file (typically /etc/sudoers) permits the user access, the system invokes the requested command. The configuration file offers detailed access permissions, including enabling commands only from the invoking terminal; requiring a password per user or group; requiring re-entry of a password every time or never requiring a password at all for a particular command line. It can also be configured to permit passing arguments or multiple commands.

History edit

Robert Coggeshall and Cliff Spencer wrote the original subsystem around 1980 at the Department of Computer Science at SUNY/Buffalo.[12] Robert Coggeshall brought sudo with him to the University of Colorado Boulder. Between 1986 and 1993, the code and features were substantially modified by the IT staff of the University of Colorado Boulder Computer Science Department and the College of Engineering and Applied Science, including Todd C. Miller.[12] The current version has been publicly maintained by OpenBSD developer Todd C. Miller since 1994,[12] and has been distributed under an ISC-style license since 1999.[12]

In November 2009 Thomas Claburn, in response to concerns that Microsoft had patented sudo,[13] characterized such suspicions as overblown.[14] The claims were narrowly framed to a particular GUI, rather than to the sudo concept.[15]

The logo is a reference to an xkcd strip.[16][17]

Design edit

Unlike the command su, users supply their personal password to sudo (if necessary)[18] rather than that of the superuser or other account. This allows authorized users to exercise altered privileges without compromising the secrecy of the other account's password.[19] Users must be in a certain group to use the sudo command, typically either the wheel group or the sudo group.[20] After authentication, and if the configuration file permits the user access, the system invokes the requested command. sudo retains the user's invocation rights through a grace period (typically 5 minutes) per pseudo terminal, allowing the user to execute several successive commands as the requested user without having to provide a password again.[21]

As a security and auditing feature, sudo may be configured to log each command run. When a user attempts to invoke sudo without being listed in the configuration file, an exception indication is presented to the user indicating that the attempt has been recorded. If configured, the root user will be alerted via mail. By default, an entry is recorded in the system.[22]

Configuration edit

The /etc/sudoers file contains a list of users or user groups with permission to execute a subset of commands while having the privileges of the root user or another specified user. The file must be edited by using the command sudo visudo. Sudo contains several configuration options such as allowing commands to be run as sudo without a password, changing which users can use sudo, and changing the message displayed upon entering an incorrect password.[23] Sudo features an easter egg that can be enabled from the configuration file that will display an insult every time an incorrect password is entered.[24]

Impact edit

In some system distributions, sudo has largely supplanted the default use of a distinct superuser login for administrative tasks, most notably in some Linux distributions as well as Apple's macOS.[25][26] This allows for more secure logging of admin commands and prevents some exploits.

RBAC edit

Main article: Role-based access control

In association with SELinux, sudo can be used to transition between roles in role-based access control (RBAC).[27]

Tools and similar programs edit

visudo is a command-line utility that allows editing the sudo configuration file in a fail-safe manner. It prevents multiple simultaneous edits with locks and performs sanity and syntax checks.

Sudoedit is a program that symlinks to the sudo binary.[28] When sudo is run via its sudoedit alias, sudo behaves as if the -e flag has been passed and allows users to edit files that require additional privileges to write to.[29]

Microsoft released its own version of sudo for Windows in February 2024. It functions similar to its Unix counterpart by giving the ability to run elevated commands from an unelevated console session.[30] The program runas provides comparable functionality in Windows, but it cannot pass current directories, environment variables or long command lines to the child. And while it supports running the child as another user, it does not support simple elevation. Hamilton C shell also includes true su and sudo for Windows that can pass all of that state information and start the child either elevated or as another user (or both).[31][32]

Graphical user interfaces exist for sudo – notably gksudo – but are deprecated in Debian and no longer included in Ubuntu.[33][34] Other user interfaces are not directly built on sudo, but provide similar temporary privilege elevation for administrative purposes, such as pkexec in Unix-like operating systems, User Account Control in Microsoft Windows and Mac OS X Authorization Services.[35]

doas, available since OpenBSD 5.8 (October 2015), has been written in order to replace sudo in the OpenBSD base system, with the latter still being made available as a port.[36]

gosu is a tool similar to sudo that is popular in containers where the terminal may not be fully functional or where there are undesirable effects from running sudo in a containerized environment.[37]

See also edit

References edit

  1. ^ Miller, Todd C. "A Brief History of Sudo". from the original on 16 November 2018. Retrieved 15 November 2018.
  2. ^ "Sudo News". from the original on 1 December 2021. Retrieved 12 April 2023.
  3. ^ Todd C. Miller (2011-06-17). "Sudo License". sudo.ws. from the original on 2015-07-31. Retrieved 2011-11-17.
  4. ^ Miller, Todd C. "Troubleshooting tips and FAQ for Sudo". from the original on 2021-11-27. Retrieved 2009-11-20.
  5. ^ Cohen, Noam (May 26, 2008). "This Is Funny Only if You Know Unix". The New York Times. from the original on January 22, 2018. Retrieved April 9, 2012.
  6. ^ By (2014-05-28). "Interview: Inventing The Unix "sudo" Command". Hackaday. from the original on 2022-01-10. Retrieved 2022-01-10.
  7. ^ . Archived from the original on 2023-02-24. Retrieved 2015-08-18.
  8. ^ "What is Sudo". from the original on 2022-06-03. Retrieved 2022-06-07.
  9. ^ "su(1) Linux manual page". from the original on 2022-06-05. Retrieved 2022-06-08.
  10. ^ "Sudo - ArchWiki" (MediaWiki). wiki.archlinux.org. from the original on 2021-04-25. Retrieved 2015-11-09.
  11. ^ Haeder, A.; Schneiter, S. A..; Pessanha, B. G.; Stanger, J. LPI Linux Certification in a Nutshell. O'Reilly Media, 2010. p. 409. ISBN 978-0596804879.
  12. ^ a b c d Miller, Todd C. "A Brief History of Sudo". from the original on 2021-01-27. Retrieved 2021-02-08.
  13. ^ Lilly, Paul. . Archived from the original on 2014-07-01. Retrieved 2009-11-13.
  14. ^ "Does New Microsoft Patent Infringe On Unix Program Sudo? Some in the open source community suspicious of Microsoft's intent". Dark Reading. 2009-11-16. from the original on 2022-08-20. Retrieved 2022-05-27. A patent granted to Microsoft (NSDQ: MSFT) has stirred up worry that world's largest software company wants to claim Unix's "sudo" as its own. [...] In short, suspicions about this patent are overblown.
  15. ^ Eaton, Nick (November 12, 2009). . seattlepi.com. Archived from the original on 2021-06-20. Retrieved April 24, 2011.
  16. ^ "Sandwich". from the original on 2022-04-09. Retrieved 2022-04-11.
  17. ^ "Sudo Logo". from the original on 2022-04-27. Retrieved 2022-04-11.
  18. ^ "About Unix sudo and su commands". University Information Technology Services. June 18, 2019. from the original on September 10, 2022. Retrieved September 10, 2022.
  19. ^ Wallen, Jack (2023-05-16). "Linux security: What is sudo and why is it so important?". ZDNET. Retrieved 2024-01-23.
  20. ^ Aleksic, Marko (2020-08-18). "Linux Sudo Command, How to Use With Examples". Knowledge Base by phoenixNAP. Retrieved 2024-01-23.
  21. ^ Sheldon, Robert (February 2023). "What is the sudo (su 'do') command-line utility? – TechTarget Definition". TechTarget Security. Retrieved 2024-01-23.
  22. ^ https://www.baeldung.com/linux/sudo-incident-logs 2023-04-09 at the Wayback Machine Retrieved April 10, 2023
  23. ^ Wallen, Jack (2010-05-12). "Linux 101: Introduction to sudo". Linux.com. Retrieved 2024-01-23.
  24. ^ Kili, Aaron (2017-01-12). "Let Sudo Insult You When You Enter Incorrect Password". www.tecmint.com. Retrieved 2024-01-23.
  25. ^ "RootSudo". Community Ubuntu Documentation. help.ubuntu.com. 2011-11-08. from the original on 2011-11-05. Retrieved 2011-11-17.
  26. ^ . MacDevCenter.com. Archived from the original on 2012-10-15. Retrieved 2022-05-27.
  27. ^ "SELinux Lockdown Part Five: SELinux RBAC". from the original on 2013-05-11. Retrieved 2012-11-17.
  28. ^ Bennett, Jonathan (2021-01-29). "This Week In Security: Sudo, Database Breaches, And Ransomware". Hackaday. from the original on 2021-06-21. Retrieved 2021-05-24.
  29. ^ "sudoedit(8) - Linux manual page". man7.org. from the original on 2021-05-24. Retrieved 2021-05-24.
  30. ^ Adoumie, Jordi (2024-02-07). "Introducing Sudo for Windows!". Windows Command Line. Retrieved 2024-02-08.
  31. ^ "su". Hamilton Laboratories. from the original on July 17, 2015. Retrieved August 17, 2015.
  32. ^ "Predefined aliases: sudo". Hamilton Laboratories. from the original on August 26, 2015. Retrieved August 17, 2015.
  33. ^ Bicha, Jeremy (December 30, 2017). "Remove gksu from Ubuntu". Canonical, which owns Launchpad. from the original on May 5, 2020. Retrieved January 10, 2020.
  34. ^ "Software Packages in "bionic"". Canonical. from the original on October 18, 2019. Retrieved January 10, 2020.
  35. ^ "Introduction to Authorization Services Programming Guide". developer.apple.com. from the original on 2022-05-28. Retrieved 2022-05-27.
  36. ^ "sudo-1.8.26 – execute a command as another user". OpenBSD ports. 2018-11-16. from the original on 2019-02-27. Retrieved 2019-02-26.
  37. ^ "gosu". GitHub.

External links edit

  • Official website  

January 01, 1970
sudo, sudo, redirects, here, profit, organization, sudan, social, development, organization, other, uses, sudo, disambiguation, program, unix, like, computer, operating, systems, that, enables, users, programs, with, security, privileges, another, user, defaul. SUDO redirects here For the non profit organization see Sudan Social Development Organization For other uses see Sudo disambiguation sudo s uː d uː 4 is a program for Unix like computer operating systems that enables users to run programs with the security privileges of another user by default the superuser 5 It originally stood for superuser do 6 as that was all it did and it is its most common usage 7 however the official Sudo project page lists it as su do 8 The current Linux manual pages for su define it as substitute user 9 making the correct meaning of sudo substitute user do because sudo can run a command as other users as well 10 11 sudoThe sudo command in a terminalOriginal author s Robert Coggeshall Cliff SpencerDeveloper s Todd C MillerInitial releaseAround 1980 1 Stable release1 9 15 2 6 November 2023 5 months ago 6 November 2023 Repositorygithub wbr com wbr sudo project wbr sudoWritten inCOperating systemUnix likeTypePrivilege authorizationLicenseISC style 3 Websitewww wbr sudo wbr ws Unlike the similar command su users must by default supply their own password for authentication rather than the password of the target user After authentication and if the configuration file typically a href Configuration etc sudoers a permits the user access the system invokes the requested command The configuration file offers detailed access permissions including enabling commands only from the invoking terminal requiring a password per user or group requiring re entry of a password every time or never requiring a password at all for a particular command line It can also be configured to permit passing arguments or multiple commands Contents 1 History 2 Design 3 Configuration 4 Impact 5 RBAC 6 Tools and similar programs 7 See also 8 References 9 External linksHistory editRobert Coggeshall and Cliff Spencer wrote the original subsystem around 1980 at the Department of Computer Science at SUNY Buffalo 12 Robert Coggeshall brought sudo with him to the University of Colorado Boulder Between 1986 and 1993 the code and features were substantially modified by the IT staff of the University of Colorado Boulder Computer Science Department and the College of Engineering and Applied Science including Todd C Miller 12 The current version has been publicly maintained by OpenBSD developer Todd C Miller since 1994 12 and has been distributed under an ISC style license since 1999 12 In November 2009 Thomas Claburn in response to concerns that Microsoft had patented sudo 13 characterized such suspicions as overblown 14 The claims were narrowly framed to a particular GUI rather than to the sudo concept 15 The logo is a reference to an xkcd strip 16 17 Design editUnlike the command su users supply their personal password to sudo if necessary 18 rather than that of the superuser or other account This allows authorized users to exercise altered privileges without compromising the secrecy of the other account s password 19 Users must be in a certain group to use the sudo command typically either the wheel group or the sudo group 20 After authentication and if the configuration file permits the user access the system invokes the requested command sudo retains the user s invocation rights through a grace period typically 5 minutes per pseudo terminal allowing the user to execute several successive commands as the requested user without having to provide a password again 21 As a security and auditing feature sudo may be configured to log each command run When a user attempts to invoke sudo without being listed in the configuration file an exception indication is presented to the user indicating that the attempt has been recorded If configured the root user will be alerted via mail By default an entry is recorded in the system 22 Configuration editThe etc sudoers file contains a list of users or user groups with permission to execute a subset of commands while having the privileges of the root user or another specified user The file must be edited by using the command sudo visudo Sudo contains several configuration options such as allowing commands to be run as sudo without a password changing which users can use sudo and changing the message displayed upon entering an incorrect password 23 Sudo features an easter egg that can be enabled from the configuration file that will display an insult every time an incorrect password is entered 24 Impact editIn some system distributions sudo has largely supplanted the default use of a distinct superuser login for administrative tasks most notably in some Linux distributions as well as Apple s macOS 25 26 This allows for more secure logging of admin commands and prevents some exploits RBAC editMain article Role based access control In association with SELinux sudo can be used to transition between roles in role based access control RBAC 27 Tools and similar programs editvisudo is a command line utility that allows editing the sudo configuration file in a fail safe manner It prevents multiple simultaneous edits with locks and performs sanity and syntax checks Sudoedit is a program that symlinks to the sudo binary 28 When sudo is run via its sudoedit alias sudo behaves as if the e flag has been passed and allows users to edit files that require additional privileges to write to 29 Microsoft released its own version of sudo for Windows in February 2024 It functions similar to its Unix counterpart by giving the ability to run elevated commands from an unelevated console session 30 The program runas provides comparable functionality in Windows but it cannot pass current directories environment variables or long command lines to the child And while it supports running the child as another user it does not support simple elevation Hamilton C shell also includes true su and sudo for Windows that can pass all of that state information and start the child either elevated or as another user or both 31 32 Graphical user interfaces exist for sudo notably gksudo but are deprecated in Debian and no longer included in Ubuntu 33 34 Other user interfaces are not directly built on sudo but provide similar temporary privilege elevation for administrative purposes such as pkexec in Unix like operating systems User Account Control in Microsoft Windows and Mac OS X Authorization Services 35 doas available since OpenBSD 5 8 October 2015 has been written in order to replace sudo in the OpenBSD base system with the latter still being made available as a port 36 gosu is a tool similar to sudo that is popular in containers where the terminal may not be fully functional or where there are undesirable effects from running sudo in a containerized environment 37 See also edit nbsp Free and open source software portal chroot doas runas Comparison of privilege authorization featuresReferences edit Miller Todd C A Brief History of Sudo Archived from the original on 16 November 2018 Retrieved 15 November 2018 Sudo News Archived from the original on 1 December 2021 Retrieved 12 April 2023 Todd C Miller 2011 06 17 Sudo License sudo ws Archived from the original on 2015 07 31 Retrieved 2011 11 17 Miller Todd C Troubleshooting tips and FAQ for Sudo Archived from the original on 2021 11 27 Retrieved 2009 11 20 Cohen Noam May 26 2008 This Is Funny Only if You Know Unix The New York Times Archived from the original on January 22 2018 Retrieved April 9 2012 By 2014 05 28 Interview Inventing The Unix sudo Command Hackaday Archived from the original on 2022 01 10 Retrieved 2022 01 10 Aaron Toponce The Meaning of su Archived from the original on 2023 02 24 Retrieved 2015 08 18 What is Sudo Archived from the original on 2022 06 03 Retrieved 2022 06 07 su 1 Linux manual page Archived from the original on 2022 06 05 Retrieved 2022 06 08 Sudo ArchWiki MediaWiki wiki archlinux org Archived from the original on 2021 04 25 Retrieved 2015 11 09 Haeder A Schneiter S A Pessanha B G Stanger J LPI Linux Certification in a Nutshell O Reilly Media 2010 p 409 ISBN 978 0596804879 a b c d Miller Todd C A Brief History of Sudo Archived from the original on 2021 01 27 Retrieved 2021 02 08 Lilly Paul Microsoft has Patented sudo Yes the Command Archived from the original on 2014 07 01 Retrieved 2009 11 13 Does New Microsoft Patent Infringe On Unix Program Sudo Some in the open source community suspicious of Microsoft s intent Dark Reading 2009 11 16 Archived from the original on 2022 08 20 Retrieved 2022 05 27 A patent granted to Microsoft NSDQ MSFT has stirred up worry that world s largest software company wants to claim Unix s sudo as its own In short suspicions about this patent are overblown Eaton Nick November 12 2009 Did Microsoft just sneakily patent an open source tool seattlepi com Archived from the original on 2021 06 20 Retrieved April 24 2011 Sandwich Archived from the original on 2022 04 09 Retrieved 2022 04 11 Sudo Logo Archived from the original on 2022 04 27 Retrieved 2022 04 11 About Unix sudo and su commands University Information Technology Services June 18 2019 Archived from the original on September 10 2022 Retrieved September 10 2022 Wallen Jack 2023 05 16 Linux security What is sudo and why is it so important ZDNET Retrieved 2024 01 23 Aleksic Marko 2020 08 18 Linux Sudo Command How to Use With Examples Knowledge Base by phoenixNAP Retrieved 2024 01 23 Sheldon Robert February 2023 What is the sudo su do command line utility TechTarget Definition TechTarget Security Retrieved 2024 01 23 https www baeldung com linux sudo incident logs Archived 2023 04 09 at the Wayback Machine Retrieved April 10 2023 Wallen Jack 2010 05 12 Linux 101 Introduction to sudo Linux com Retrieved 2024 01 23 Kili Aaron 2017 01 12 Let Sudo Insult You When You Enter Incorrect Password www tecmint com Retrieved 2024 01 23 RootSudo Community Ubuntu Documentation help ubuntu com 2011 11 08 Archived from the original on 2011 11 05 Retrieved 2011 11 17 Top Ten Mac OS X Tips for Unix Geeks MacDevCenter com Archived from the original on 2012 10 15 Retrieved 2022 05 27 SELinux Lockdown Part Five SELinux RBAC Archived from the original on 2013 05 11 Retrieved 2012 11 17 Bennett Jonathan 2021 01 29 This Week In Security Sudo Database Breaches And Ransomware Hackaday Archived from the original on 2021 06 21 Retrieved 2021 05 24 sudoedit 8 Linux manual page man7 org Archived from the original on 2021 05 24 Retrieved 2021 05 24 Adoumie Jordi 2024 02 07 Introducing Sudo for Windows Windows Command Line Retrieved 2024 02 08 su Hamilton Laboratories Archived from the original on July 17 2015 Retrieved August 17 2015 Predefined aliases sudo Hamilton Laboratories Archived from the original on August 26 2015 Retrieved August 17 2015 Bicha Jeremy December 30 2017 Remove gksu from Ubuntu Canonical which owns Launchpad Archived from the original on May 5 2020 Retrieved January 10 2020 Software Packages in bionic Canonical Archived from the original on October 18 2019 Retrieved January 10 2020 Introduction to Authorization Services Programming Guide developer apple com Archived from the original on 2022 05 28 Retrieved 2022 05 27 sudo 1 8 26 execute a command as another user OpenBSD ports 2018 11 16 Archived from the original on 2019 02 27 Retrieved 2019 02 26 gosu GitHub External links editOfficial website nbsp Retrieved from https en wikipedia org w index php title Sudo amp oldid 1219086992, wikipedia, wiki, book, books, library,

article

, read, download, free, free download, mp3, video, mp4, 3gp, jpg, jpeg, gif, png, picture, music, song, movie, book, game, games.