Debian's sudo package has the password timeout set to 15 minutes. This means that when you first enter your password, as long as you don't wait more than 15 minutes between sudo commands, you won't have to enter it again. The password timeout can be immediately expired with sudo -k.
As a consequence, the PATH of the user is ignored except if the user is in group sudo.
This will complete the installation of sudo.
# This file MUST be edited with the ‘visudo' command as root.
Only last line is valid now this means that the root user can run any command.
For more commands, run your shell with sudo.
$sudo shutdown -r +15 "quick reboot"
make the cd and file redi-rection work.
$sudo sh -c "cd /home ; du -s * | sort -rn > USAGE"
Rootsh is a wrapper for shells which logs all echoed keystrokes and terminal output to a file and/or to syslog. It's main purpose is the auditing of users who need a shell with root privileges. They start rootsh through the sudo mechanism.
Start a shell with logging of input/output. Rootsh must be started via sudo if you want to become root. It does not raise your privileges on it's own. You can run rootsh as a standalone application if you only want to log your own user's session. If you call rootsh with additional commands, these will be passed to the shell.
User should see himself in a root shell, as if he typed "su -" or "sudo -s".
Main advantage of this is, everything user types will be sent to syslog. So if he tries to access some secure files from the server you can catch him using the logfiles from your syslog server.
Start a logged shell in the context of user oracle.
identical to "script -f mysession.log"
Giving sudo for dpkg seems harmless, but remember that the user can easily create a package which contains a dummy file and then puts his commands in the postinst script. This script is then executed as root upon installing.
“apt-get install sudo” –> not work, cause I’m not sudoer and command “sudo apt-get install sudo” NOT work. Its a Catch22 situation. And, OF COURSE, root login is disabled by default. What a paranoia …. why do somthing easy, when you can spent few hours on that?