Old Parrot Community

Community portal of the Parrot Project.

You are not logged in.

#1 2018-01-10 00:58:49

no0b
Community Member
Registered: 2017-12-14
Posts: 144

Disabling sudo password prompt on User, is it bad ?

Whenever i use things that need sudo in terminal, it prompt me for a password obviously, while with GUI applications i can choose 'save for this session'.

So if my current sudo state is

Matching Defaults entries for user on pc:
    env_reset, mail_badpass,
    secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin

User user may run the following commands on pc:
    (ALL : ALL) ALL
    (ALL : ALL) NOPASSWD: ALL


Is it bad habit ? I thought that typing each time my account password is annoying and also risky if in a public place, and that as long as no one except I go on the computer it's not that bad ? I'm new and i appreciate any advices.

Last edited by no0b (2018-01-10 00:59:08)

Offline

#2 2018-01-17 01:53:17

Akito
Administrator
From: Germany
Registered: 2017-03-23
Posts: 53

Re: Disabling sudo password prompt on User, is it bad ?

Depends very much on your use. If you sit often in public and don't fear for your laptop of being stolen, then it might not be bad. But usually it is recommended that you leave it on, because it is generally more secure, especially if you handle dangerous or vulnerable applications on your OS.


Knowledge is an anti-capitalistic commodity.
BURST-AA9W-74EX-KZNE-4ST7K

GPG Fingerprint: 150D 6A1A 321D E2C5 58F2  EF85 4EC6 9490 7FC7 1B11
GPG Info: http://pgp.mit.edu/pks/lookup?search=0x4EC694907FC71B11
GPG Key: http://pgp.mit.edu/pks/lookup?op=get&se … 907FC71B11

Offline

#3 2018-01-17 15:12:23

no0b
Community Member
Registered: 2017-12-14
Posts: 144

Re: Disabling sudo password prompt on User, is it bad ?

Thanks that's what i thought, i don't understand though, as long i shutdown my computer when not on it, if someone steals it, it won't help him that i disabled the sudo prompt since he will need to have my password anyway to log in on my account right ?

As for my important stuff, i encrypt files so it's easy on ressources/hard drives, and easier to access. But its true that there's often meta data to find.

Last edited by no0b (2018-01-17 15:12:59)

Offline

Board footer

Powered by FluxBB

Design by Klocek.