How do you remove password-less sudo from PI installation

[drtechno]

Hello, I'm a linux user for many years, and know that the policy of password-less sudo is a bad security policy, as it makes the machine susceptible to malware.

So, How do I get the standard security that I know that is the correct way to run linux on something?

[trejan]

Delete /etc/sudoers.d/010_pi-nopasswd

[DougieLawson]

Delete /etc/sudoers.d/010_pi-nopasswd

That will leave you with no user that can run sudo.

Change the contents of 010_pi-nopasswd to

Code: Select all

pi ALL=(ALL) PASSWD: ALL

[pasman1]

Delete /etc/sudoers.d/010_pi-nopasswd

That will leave you with no user that can run sudo.

you are wrong. look at /etc/sudoers

[bjtheone]

Do you want to remove just the "passwordless" part of sudo, or remove sudo? Either way you will also need to add a root password, which I suspect you already know.

[thagrol]

Do you want to remove just the "passwordless" part of sudo, or remove sudo? Either way you will also need to add a root password, which I suspect you already know.

Nope. Sudo asks for the password of the user invoking it not for root's password. A root password is only needed when you have no users capable of running su or sudo.

[drtechno]

Do you want to remove just the "passwordless" part of sudo, or remove sudo? Either way you will also need to add a root password, which I suspect you already know.

Just removing the security flaw: "Passwordless" So it will be just like my other Linux machines I own.

Would be nice if someone's PI image didn't have this security compromise from the beginning, but I have to deal with what I am working with.

These OS on this platform also suck in a different way because there is no grub to toggle kernel versions and OS boot.

[pasman1]

Would be nice if someone's PI image didn't have this security compromise from the beginning, but I have to deal with what I am working with.

try ubuntu or manjaro.

[KeithMck]

.....or Devuan - (Debian without systemd).

[pi-anazazi]

And to add some security, require root password for sudo

https://superuser.com/questions/161593/ ... t-password

...take answer by SRDC as the solution.

[Milliways]

.....or Devuan - (Debian without systemd).

Is it called this because it is antediluvian?