This method is more convenient because you can simply allow sudo access for any user you want, just by usermod -a -G sudo but takes more space (for installing new packages) than method 2 which may be more suitable for systems with very limited space.SIM uses ports to download files only. You can directly append your user to '/etc/group' but again it's better to use usermod:

You can do it by manually editing '/etc/group' but it's more standard to install and use tools for this purpose:Īnd finally add your current user to the group 'sudo'. # Uncomment to allow members of group sudo to execute any command This method is exactly the same one used in Ubuntu and other popular Linux distros to allow 'sudo' access for a user.įor activating this method first you should allow group 'sudo' to use command sudo by entering This method is very similar to Method 2, except that it allows any member of group 'sudo' to use sudo with their own password. Method 2: 'sudo'ing with the user's password Therefor in this scenario a hacker should find 3 different strings user's username, user's password and root's password to get full access to the system.Įven if the user's account get compromised, then the intruder still can't damage your system because he doesn't have root password yet. One usecase can be allowing remote ssh with password from WAN: For more security (still less than RSA key) you can only allow users other than root to ssh with their password (optionally on a custom port) from WAN.Īnd for even more security you can request root's password after running sudo. This method is more secure because you don't need to protect both root and privileged (sudoer) users to keep the whole system safe. # of the user they are running the command as (root by default).ĭefaults targetpw # Ask for the password of the target userĪLL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw' # Uncomment to allow any user to run sudo if they know the password Then uncomment the 2 lines below in that file and then save

This way when the user runs a command with sudo he should enter root's password instead of his password.įor enabling this method you should open the file '/etc/sudoers' by entering the command

In this method any user can temporarily run commands as root only if he knows the root password.

Pulse secure client ports