The translation is temporarily closed for contributions due to maintenance, please come back later.
The translation was automatically locked due to following alerts: Could not merge the repository.
Zen

Source string Source string

196/10000 · 196

This translation is currently locked.

English Actions
By default, [command]#sudo# stores the sudoer's password for a five minute timeout period. Any subsequent uses of the command during this period will not prompt the user for a password. This could be exploited by an attacker if the user leaves their workstation unattended and unlocked while still being logged in. This behavior can be changed by adding the following line to the `/etc/sudoers` file:
Defaults timestamp_timeout=pass:quotes[_value_]
where _value_ is the desired timeout length in minutes. Setting the _value_ to 0 causes [command]#sudo# to require a password every time.
If a sudoer's account is compromised, an attacker can use [command]#sudo# to open a new shell with administrative privileges:
[command]#sudo /bin/bash#
Opening a new shell as `root` in this or similar fashion gives the attacker administrative access for a theoretically unlimited amount of time, bypassing the timeout period specified in the `/etc/sudoers` file and never requiring the attacker to input a password for [command]#sudo# again until the newly opened session is closed.
Additional Resources
While programs allowing users to gain administrative privileges are a potential security risk, security itself is beyond the scope of this particular book. You should therefore refer to the resources listed below for more information regarding security and privileged access.
Installed Documentation
`su`(1) — The manual page for [command]#su# provides information regarding the options available with this command.
`sudo`(8) — The manual page for [command]#sudo# includes a detailed description of this command and lists options available for customizing its behavior.
`pam`(8) — The manual page describing the use of Pluggable Authentication Modules (PAM) for Linux.
Online Documentation
The link:++https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/++[Red{nbsp}Hat Enterprise{nbsp}Linux{nbsp}7 Security Guide] provides a more in-depth look at potential security issues pertaining to setuid programs as well as techniques used to alleviate these risks.
See Also
xref:Managing_Users_and_Groups.adoc#ch-Managing_Users_and_Groups[Managing Users and Groups] documents how to manage system users and groups in the graphical user interface and on the command line.

Loading…

User avatar None

String updated in the repository
xref:Managing_Users_and_Groups.adoc#ch-Managing_Users_and_Groups[Managing Users and Groups] documents how to manage system users and groups in the graphical user interface and on the command line.
xref:Managing_Users_and_Groups.adoc#ch-Managing_Users_and_Groups[Managing Users and Groups] documents how to manage system users and groups in the graphical user interface and on the command line.
a year ago
Browse all string changes

Things to check

Long untranslated

The string has not been translated for a long time

Reset

Glossary

English English
No related strings found in the glossary.

14684877 String information

Source string description
type: delimited block =
Flags
read-only
Source string location
./pages/basic-system-configuration/Gaining_Privileges.adoc:157
String age
a year ago
Last updated
a year ago
Source string age
a year ago
Translation file
pot/f27/pages/basic-system-configuration/Gaining_Privileges.pot, string 58