The output of 'sudo -l -U <someuser>' shows the 'sudo' commands granted to the invoker, in addition to those granted to the <someuser>
Issue
- The following command output is observed on the system.
# sudo -l -U sshd
User sshd may run the following commands on this host:
(ALL) NOPASSWD: ALL
This output is wrong, as actually sshd has not been given any sudo permission.
- When listing commands granted to a different user via "sudo -l -U", the output will list commands granted to any group that the
invokeris a member of, in addition to the actual privileges of the specified user
Environment
- Red Hat Enterprise Linux 6
- sudo-1.7.4p5-7.el6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.