2

I want to add an user who is not in admin or wheel group into the sudoers file, but I don't want to risk some kind of privilege escalation.

Are there any additional privileges for users listed in sudoers other than running sudo commands with password prompt?

  • If you want to add them, but don't want to just make them an admin, then you want them to be able to accomplish some specific task. You should then be configuring their sudo access to only allow them to accomplish that specific task, not just giving them total control of the system. Sudo has extensive documentation for this purpose: sudo.ws/man/1.8.25/sudoers.man.html – Marc Wilson Sep 15 '18 at 17:59
1

Since sudo -s makes you root, don't let anyone escalate their privileges with sudo until you've got a solid grasp of why you would let a non-admin user have limited or blanket ability to become an admin or root user.

There's really nor much else you could grant besides the ability to sudo so use that sparingly or come up with a better way to control data (encryption) or not placing it on the computer in question at all if you choose to let untrusted accounts have sudo privileges.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .