sudo for route adds

[someone_4]

Hi everyone,
I am trying to configure sudo so a Net admin can do a route add. I installed sudo version 1.6.2b1 and used the visudo command to try to configure it.

It looks like this:

# Host alias specification
Host_Alias LUPUS = lupus
# User alias specification
User_Alias OPERATOR = rleon2
# Cmnd alias specification

# User privilege specification
root ALL=(ALL) ALL
OPERATOR LUPUS = /usr/sbin/route
rleon2 ALL=/usr/sbin/route

But when I log in as rleon2 to test and see if i can do a route add. I get the error

Sorry, sudo must be setuid root.

What am i missing?

thanks,
- Richard

[S.K. Chan · Accepted solution]

Chmod your sudo program ..

# chmod 4111 sudo

SUID bit got to be set.

[Hai Nguyen_1]

Richard,

Check the mode bit of sudo.
It should ---s--x--x.
Otherwise, do this to set setuid as root.
# chmod 4111 sudo

Hai

[someone_4]

lol
I did

#chmod u+s sudo

and now it works it gives me
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these two things:

#1) Respect the privacy of others.
#2) Think before you type.

Password:
usage: add destination [netmask mask] gateway [metric]

..

How do I take that message off?

And in visudo

do i have to specify each augument?

- Richard

[Michael Tully]

Richard,

This certainly seems a permissions problem with either you 'sudo' binary or the /etc/sudoers file itself.

The permissions on /etc/sudoers should be

440 root root

I am sure someone can find the correct permission on the binary (working at home)

Cheers
~Michael~

[Sachin Patel]

Hi richard,
No you don't have to specify all arguments in /etc/sudoers file.
operator can run it like
sudo /usr/sbin/route arguments.....

Sachin

[S.K. Chan]

I think the only way to not display the message is to set NOPASSWD in the /etc/sudoers file for a specific user. I'm not sure since I've never done that before. Check the "NOPASSWD and PASSWD" section in this URL ..

http://www.courtesan.com/sudo/man/sudoers.html

[someone_4]

All that worked and Mr. S.K that is the way to stop the message.

Richard

[Ed Sampson]

The sudo warning message should only occur on the 1st usage for each user. After the user has a time stamp in the logs it should not appear again. I personally would not turnoff the passwd option, but that's up to up.

Ed