linux sudoers_Linux –将用户添加到Sudoers列表

水深无声 2023-02-28 08:41 89阅读 0赞

linux sudoers

Most of the system commands can be run as a root user or a user with [sudo][] privileges. It’s not a good idea to always login as a root user. The secure way is to disable root login after creating a new user and providing him sudo privileges.

大多数系统命令可以以root用户或具有[sudo][]特权的用户身份运行。 始终以root用户身份登录不是一个好主意。 安全的方法是在创建新用户并为其提供sudo特权后禁用root登录。

In this tutorial, we will learn how to add a user to sudoers list in Linux. The commands are generic to Linux and they will work on every distributions, such as Ubuntu, CentOS, Debian, etc.

在本教程中，我们将学习如何在Linux中将用户添加到sudoers列表。 这些命令是Linux通用的，它们可在所有发行版上使用，例如Ubuntu，CentOS，Debian等。

## 在Linux中将用户添加到sudoers列表的步骤 **(****Steps to Add a User to sudoers list in Linux****)** ##

### 1.创建一个用户 **(****1. Create a User****)** ###

Let’s first create a user for our tutorial. This is an optional step. If you already have a user to add to the sudoers list, then you can skip this step.

首先，为我们的教程创建一个用户。 这是一个可选步骤。 如果您已经有用户要添加到sudoers列表中，则可以跳过此步骤。

We will use [adduser command][] to create a user. You should be logged in as root or a user with sudo privileges to run these commands. If you are a sudo user, then add “sudo” before all the commands.

我们将使用[adduser命令][adduser command]创建一个用户。 您应该以root用户或具有sudo特权的用户身份登录才能运行这些命令。 如果您是sudo用户，则在所有命令之前添加“ sudo”。

root@localhost:~# adduser journaldev
    Adding user `journaldev' ...
    Adding new group `journaldev' (1003) ...
    Adding new user `journaldev' (1002) with group `journaldev' ...
    Creating home directory `/home/journaldev' ...
    Copying files from `/etc/skel' ...
    Enter new UNIX password: 
    Retype new UNIX password: 
    passwd: password updated successfully
    Changing the user information for journaldev
    Enter the new value, or press ENTER for the default
    	Full Name []: 
    	Room Number []: 
    	Work Phone []: 
    	Home Phone []: 
    	Other []: 
    Is the information correct? [Y/n] Y
    root@localhost:~#

The most important point is to remember the password for the new user.

最重要的一点是记住新用户的密码。

Let’s run the `groups journaldev` command to check the user group details.

让我们运行`groups journaldev`命令来检查用户组详细信息。

root@localhost:~# groups journaldev
    journaldev : journaldev

![Linux Create New User][]

Linux Create New User Linux创建新用户

### 2.将用户添加到sudo组 **(****2. Add user to the sudo group****)** ###

We can add the user to the sudo group using the following command.

我们可以使用以下命令将用户添加到sudo组。

root@localhost:~# usermod -aG sudo journaldev
    root@localhost:~#

Let’s again check the user groups to confirm that he has been added to the sudoers list.

让我们再次检查用户组以确认他已被添加到sudoers列表中。

root@localhost:~# groups journaldev
    journaldev : journaldev sudo
    root@localhost:~#

![Linux Add User To Sudo Group][]

Linux Add User To Sudo Group Linux将用户添加到Sudo组

### 3.验证用户的Sudo访问 **(****3. Validate the Sudo Access of the user****)** ###

Let’s quickly validate that the user is part of the sudoers list by running some commands with “sudo” prefix.

让我们通过运行一些带有“ sudo”前缀的命令来快速验证用户是否属于sudoers列表。

First of all, use the **su command** to change the user.

首先，使用**su命令**更改用户。

root@localhost:~# su - journaldev
    To run a command as administrator (user "root"), use "sudo <command>".
    See "man sudo_root" for details.
    
    journaldev@localhost:~$

Let’s run some commands as the normal user and then as the superuser using sudo prefix.

让我们以普通用户身份然后以超级用户身份使用sudo前缀运行一些命令。

journaldev@localhost:~$ ls -ltr /root
    ls: cannot open directory '/root': Permission denied
    journaldev@localhost:~$ 
    journaldev@localhost:~$ sudo ls -ltr /root
    [sudo] password for journaldev: 
    total 4
    drwxr-xr-x 2 root root 4096 Apr 28 11:12 a.txt
    -rw-r--r-- 1 root root    0 Apr 28 11:12 linux.txt
    -rw-r--r-- 1 root root    0 Apr 28 11:21 journaldev.txt
    -rw-r--r-- 1 root root    0 Apr 28 11:22 lfd.txt
    -rw-r--r-- 1 root root    0 Apr 28 11:22 test.txt
    journaldev@localhost:~$

![Linux User Sudoers Validation][]

Linux User Sudoers Validation Linux用户Sudoers验证

That’s it. Our user is part of the sudoers list. We can run any command as a superuser now.

而已。 我们的用户属于sudoers列表。 我们现在可以以超级用户身份运行任何命令。

> 翻译自: [https://www.journaldev.com/39529/linux-add-user-to-sudoers-list][https_www.journaldev.com_39529_linux-add-user-to-sudoers-list]

linux sudoers

[sudo]: https://www.journaldev.com/25058/sudo-command-in-linux
[adduser command]: https://www.journaldev.com/28677/create-manage-new-users-linux
[Linux Create New User]: https://cdn.journaldev.com/wp-content/uploads/2020/05/linux-create-new-user.png
[Linux Add User To Sudo Group]: /images/20230209/baf9b5614f2b4da583b35141eb7e3500.png
[Linux User Sudoers Validation]: /images/20230209/589fd85b4ca04a07b2ed29ffb271ab1c.png
[https_www.journaldev.com_39529_linux-add-user-to-sudoers-list]: https://www.journaldev.com/39529/linux-add-user-to-sudoers-list