topic Re: visudo error in Operating System - HP-UX

visudo error

zsujith — Mon, 17 Mar 2008 11:01:05 GMT

Hello,

When we execute visudo command the following error is as shown below.

# /usr/local/sbin/visudo
/usr/local/sbin/visudo: /usr/local/etc/sudoers: Permission denied

Thanks & Regards

Re: visudo error

Ivan Krastev — Mon, 17 Mar 2008 11:07:59 GMT

Only root can use visudo. Or someone who already have access configured in sudoers.

regards,
ivan

Re: visudo error

Siju Vadakkan — Mon, 17 Mar 2008 11:20:16 GMT

Check the permission of sudoers file

ll /usr/local/etc/sudoers

Re: visudo error

zsujith — Mon, 17 Mar 2008 11:26:57 GMT

Hello,

We get the premission denied error when we execute through root login also.

The permission of sudoers file is as shown below.

# ls -lt /usr/local/etc/sudoers
-r--r----- 1 root root 1551 Mar 14 04:20 /usr/local/etc/sudoers

Regards

Re: visudo error

Ivan Krastev — Mon, 17 Mar 2008 11:43:18 GMT

Add u+w (write) permissions:

chmod u+w /usr/local/etc/sudoers

regards,
ivan

Re: visudo error

Siju Vadakkan — Mon, 17 Mar 2008 11:46:00 GMT

make the permission as 644

chmod 644 /usr/local/etc/sudoers

Re: visudo error

Mounaam — Mon, 17 Mar 2008 12:26:03 GMT

Hi,

don't change the permissions of sudoers, but check perms and owner of sudo binary. It must have:
-rwsr-xr-x root/root

Re: visudo error

zsujith — Mon, 17 Mar 2008 13:44:12 GMT

Hello,

The permission of 3 files are shown below.

ls -lt /usr/local/bin/sudo
---s--x--x 1 root users 95716 Dec 3 2000 /usr/local/bin/sudo
$ ls -lt /usr/local/sbin/visudo
-rwxr-xr-x 1 root users 69780 Dec 3 2000 /usr/local/sbin/visudo
$ ls -lt /usr/local/etc/sudoers
-r--r----- 1 root root 1551 Mar 14 04:20 /usr/local/etc/sudoers

The same permission are there in other 2 servers and there visudo is working fine.

Waiting for your reply.

Regards

Re: visudo error

Ralph Grothe — Mon, 17 Mar 2008 14:49:44 GMT

Ownership root:root and perms 0440 of the sudoers file
is perfectly ok, and shouldn't be changed at all.
If you haven't changed Defaults in sudoers
then you could look at the logfile where your syslogd auth facility is being logged to for any hints why visudo is rejecting you.

Re: visudo error

Mounaam — Mon, 17 Mar 2008 14:49:59 GMT

Hi,

sorry I made a mistake on my last post:
I gave you permission of sudo binary and not visudo.

Can you check that you have write permission on directory: /usr/local/etc/

and finally execute strace -o /tmp/out.txt visudo
and search for a syscall that is returning an error like EACCES or EPERM.

Re: visudo error

Dennis Handly — Mon, 17 Mar 2008 15:36:40 GMT

>Mounaam: finally execute strace

On HP-UX you want tusc:
tusc -fp -o /tmp/out.txt visudo