On Thu, Jun 17, 2010 at 8:49 AM, Andres P <[email protected]> wrote:
> On Thu, Jun 17, 2010 at 9:17 AM, Allan McRae <[email protected]> wrote:
>> On 17/06/10 23:35, Andres P wrote:
>>>
>>> On Thu, Jun 17, 2010 at 9:04 AM, Allan McRae<[email protected]>  wrote:
>>>>
>>>> Um...  no it does not...   sudo -l does not ask for a password even with
>>>> timestamp_timeout=0.
>>>>
>>>> Allan
>>>
>>> Yes it does... man sudoers
>>>
>>> Defaults  timestamp_timeout=0, passwd_timeout=0
>>>
>>> sudo -l /bin/true&&  sudo /bin/true
>>>
>>> will ask you twice...  come on now :/
>>>
>>
>> al...@mugen ~
>>> sudo -l
>> Matching Defaults entries for allan on this host:
>>    timestamp_timeout=0, passwd_timeout=0
>>
>> User allan may run the following commands on this host:
>>    (ALL) ALL
>>
>> al...@mugen ~
>>> sudo -l /bin/true && sudo /bin/true
>> /bin/true
>> Password:
>>
>> al...@mugen ~
>>>
>>
>> I count one password request...
>>
>
> I advice that you create a new user with a fresh leash.
>
> I'm using sudo 1.7.2p7-1 and could go through the trouble of naggging
> folks to post their sudo output just to get this fixed ;)
>
> My sudoers verbatim:
> # Defaults specification
> Defaults  rootpw, timestamp_timeout=0, passwd_timeout=0
>
> # User privilege specification
> root    ALL=(ALL) ALL
>
> # Uncomment to allow people in group wheel to run all commands
> %wheel  ALL=(ALL) ALL
>
> Nothing exotic... the only relevant setting is timestamp

Dude, the ball is in your court to prove this, I can't get it to do
anything resembling asking for my password twice. I added the two
options to my sudoers file and look at hte following sequence. Note
that the only time it asks for my password is on the actual execution
of the command, not on the '-l' usage.

dmc...@galway ~/projects/pacman (master)
$ sudo -l /bin/true
/bin/true

dmc...@galway ~/projects/pacman (master)
$ sudo /bin/true
Password:

dmc...@galway ~/projects/pacman (master)
$ sudo /bin/true
Password:

dmc...@galway ~/projects/pacman (master)
$ sudo -l /bin/true
/bin/true

Reply via email to