Dear Bradley,

There is no root group on my machine, and I added myself to wheel group using 'Preferences.' I left the 'wheel' group sudoers lines untouched. I added my user name to sudoers. "jbb ALL=(ALL) NOPASSWD: ALL"

There is no tree '/Local' on my machine. sudo is in the same place. There is no subtree labeled 'Default/Groups.' I use 'locate' for system search. What system are you on? Mine is Snow Leopard;

 System Version:        Mac OS X 10.6.7 (10J869)
 Kernel Version:        Darwin 10.7.0

jbb@pinball:~
(3): % groups
staff com.apple.access_screensharing com.apple.sharepoint.group.1 _developer _lpoperator _lpadmin _appserveradm admin _appserverusr localaccounts everyone wheel
jbb@pinball:~
(4): %

        Shalom,

        John B. Brown.
        [[email protected]]
        358 High Street,
        Buffalo, Wyoming
        82834

"Freedom is not worth having if it does not include
the freedom to make mistakes"  Mahatma Gandhi
"There was never a good war, or a bad peace."
Benjamin Franklin
"I wonder whether the world is being run
by smart people who are putting us on
or by imbeciles who really mean it."  Mark Twain

1-307-684-9068


Bradley Giesbrecht wrote:
On Apr 28, 2011, at 12:42 PM, John B Brown wrote:

Dear Alex,

        In the original source for sudo there is a configure condition that 
must be met for group members;

"--with-exempt=group     no passwd needed for users in this group"

        Which condition do you think Apple set for this? Your group 'sudoers' 
or 'wheel' or some other condition? I suspect this condition is unset as 
delivered by Apple.

        Or, possibly, this original configuration is unnecessary? Just a waste 
of programming space?

        Some errors come from reworking an original program for proprietary 
motives, and ignoring the original configuration conditions. The group I use 
for purposes of system maintenance is 'wheel.' The original version includes in 
a sudoers script;

"
# Uncomment to allow people in group wheel to run all commands
# %wheel        ALL=(ALL) ALL

# Same thing without a password
# %wheel        ALL=(ALL) NOPASSWD: ALL
"

        Uncommenting the wheel lines in sudoers using the Apple delivered sudo 
does not provide NOPASSWD action for group 'wheel.' Compiling original source 
with '--with-exempt=wheel' provides wheel with NOPASSWD action. Under that 
condition /etc/sudoers seems to work correctly. Apples compile seems not to 
provide that correct action.

        Myself, I don't use those 'wheel' lines in sudoers. I set my user for 
the second condition above. That way, as member of group wheel, I get to use 
sudo without a password because I compile sudo source using 
--with-exempt=wheel. Otherwise, I will be asked for a password.

        Or maybe its an Apple OS group permissions thing and mine are not 
correctly set?

John, I don't have this NOPASSWD issue. Did you add yourself to the wheel group?

pillbox:pixilla brad$ sudo which sudo
/usr/bin/sudo
pillbox:pixilla brad$ sudo grep -E "^%wheel" /etc/sudoers %wheel ALL=(ALL) NOPASSWD: ALL
pillbox:pixilla brad$ dscl localhost -read /Local/Default/Groups/wheel | grep 
GroupMembership
GroupMembership: root brad


Regards,
Bradley Giesbrecht (pixilla)






_______________________________________________
macports-users mailing list
[email protected]
http://lists.macosforge.org/mailman/listinfo.cgi/macports-users

Reply via email to