{"id":160,"date":"2024-12-19T07:02:52","date_gmt":"2024-12-19T07:02:52","guid":{"rendered":"https:\/\/techkubo.com\/linux\/?p=160"},"modified":"2025-05-28T18:05:19","modified_gmt":"2025-05-28T18:05:19","slug":"linux-sudo-command","status":"publish","type":"post","link":"https:\/\/techkubo.com\/linux\/linux-sudo-command\/","title":{"rendered":"Linux – sudo Command"},"content":{"rendered":"\n

The sudo<\/code> (short for “superuser do”) command allows a permitted user to execute a command as the superuser or another user, as specified by the security policy. This is critical for performing tasks that require higher privileges, such as installing software, modifying system files, or managing user accounts.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Initial Example<\/h2>\n\n\n\n

To use sudo<\/code>, simply prefix the command you want to run with sudo<\/code>:<\/p>\n\n\n\n

sudo command<\/pre><\/div>\n\n\n\n
<\/p>\n\n\n\n
SUDO Paramaters<\/h2>\n\n\n\n
Parameter<\/th>Description<\/th><\/tr><\/thead>
-A<\/code><\/td>Use the askpass<\/code> helper to prompt for the password.<\/td><\/tr>
-b<\/code><\/td>Run the command in the background.<\/td><\/tr>
-c class<\/code><\/td>Run the command with the specified SELinux security context.<\/td><\/tr>
-H<\/code><\/td>Set the HOME environment variable to the home directory of the target user.<\/td><\/tr>
-i<\/code><\/td>Start a login shell as the target user.<\/td><\/tr>
-K<\/code><\/td>Invalidate the timestamp file, forcing a password prompt the next time sudo<\/code> is run.<\/td><\/tr>
-k<\/code><\/td>Invalidate the timestamp file, but do not prompt for a password.<\/td><\/tr>
-l<\/code><\/td>List the allowed and forbidden commands for the invoking user.<\/td><\/tr>
-n<\/code><\/td>Avoid prompting for a password. If a password is required, the command will fail.<\/td><\/tr>
-p prompt<\/code><\/td>Use the specified prompt instead of the default password prompt.<\/td><\/tr>
-S<\/code><\/td>Read the password from standard input.<\/td><\/tr>
-s<\/code><\/td>Run the shell specified by the SHELL environment variable, or the shell listed in the passwd entry of the target user.<\/td><\/tr>
-u user<\/code><\/td>Run the command as the specified user (default is root).<\/td><\/tr>
-v<\/code><\/td>Update the user’s timestamp without running a command.<\/td><\/tr>
--help<\/code><\/td>Display help information and exit.<\/td><\/tr>
--preserve-env<\/code><\/td>Preserve the current environment when running the command.<\/td><\/tr>
--reset-timestamp<\/code><\/td>Reset the user’s timestamp without running a command.<\/td><\/tr>
--version<\/code><\/td>Show version information and exit.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
Examples<\/h2>\n\n\n\n
1. Running a Command as Superuser<\/h4>\n\n\n\n
To run a command with superuser privileges, prefix it with sudo<\/code>:<\/p>\n\n\n\n
sudo apt install package_name<\/pre><\/div>\n\n\n\n
2. Editing System Files<\/h4>\n\n\n\n
If you need to edit system configuration files, you can use sudo<\/code> with a text editor. For example, to edit the hosts<\/code> file with nano<\/code>:<\/p>\n\n\n\n
sudo nano \/etc\/hosts<\/pre><\/div>\n\n\n\n
3. Switching to Another User<\/h4>\n\n\n\n
You can also use sudo<\/code> to run commands as another user with the -u<\/code> option. For example, to switch to the user john<\/code>:<\/p>\n\n\n\n
sudo -u john command<\/pre><\/div>\n\n\n\n
4. Managing User Privileges<\/h4>\n\n\n\n
To manage user privileges, you’ll often edit the sudoers<\/code> file. This is typically done with the visudo<\/code> command, which ensures syntax correctness. Open the sudoers<\/code> file with:<\/p>\n\n\n\n
sudo visudo<\/pre><\/div>\n\n\n\n
5. Running a Command Without Password<\/h4>\n\n\n\n
To run a command without being prompted for a password, add the NOPASSWD<\/code> directive in the sudoers<\/code> file. For example:<\/p>\n\n\n\n
username ALL=(ALL) NOPASSWD: \/path\/to\/command<\/pre><\/div>\n\n\n\n
6. Setting a Timeout for Password Cache<\/h4>\n\n\n\n
By default, sudo<\/code> caches your credentials for a period of time. To change this timeout, edit the sudoers<\/code> file and set the timestamp_timeout<\/code> parameter. For example, to set it to 15 minutes:<\/p>\n\n\n\n
Defaults timestamp_timeout=15<\/pre><\/div>\n\n\n\n
7. Viewing Logs<\/h4>\n\n\n\n
To view a record of commands run with sudo<\/code>, check the log file, usually found at \/var\/log\/auth.log<\/code>. Use a command like:<\/p>\n\n\n\n
sudo tail \/var\/log\/auth.log<\/pre><\/div>\n\n\n\n
<\/p>\n\n\n\n
Linux Playground<\/h2>\n\n\n\n