secondary super user

[Alicelinux]

we already have root account, we want to create another root user , by using user add command, it will create a normal user, then we change group to root,

is there a simple step we can directly create another super user by using user add? ,

 

[arochester]

Do you use sudo already?

AS ROOT the command in the Terminal is

usermod -a -G sudo <username>

Replace <username> with the username to which you want to grant sudo access.

Now logout & login to get sudo access to those users.

 

[JasKinasis]

I agree with arochester.
Any users requiring root permissions should be added to the sudo group.

Additionally, the actual root account itself should be disabled - that should help prevent unauthorized users (like your hacker nuisances ) from being able to directly access the root account.

Also there are other measures like: disabling root login for SSH connections, using cryptographic keys for SSH connections instead of a password based login. That would also help keep hackers at bay.

See here:
https://access.redhat.com/documenta...rity_Guide/s2-wstation-privileges-noroot.html

 

[Alicelinux]

no, I want second root, not through sudo, i want another root, for example xyz with uid=0, group id=0, root group

 

[JasKinasis]

AFAIK, there can be only one root user. Adding an ordinary user and adding them to the sudo group is one way of allowing a user to access root privileges. I don't know what the effect of adding them to the root group would be.

If you're worried about the root account being compromised, you could try resetting the password for the root account. Then create a user with sudo privileges and use that account to disable the root account and then perhaps limit the permissions of the rogue account you spotted, or simply remove it altogether, if you haven't already!

 

[Alicelinux]

thanks, but the point is if i add one user abc, password 1234 and use
usermod -a -G sudo abc, but user abc don't know root password, he can't have root priviliedges, my goal is to let user abc to have all root priviledges without knowing root password

 

[wizardfromoz]

Can you not do something like?:

in /etc/sudoers

%group ALL=(ALL) NOPASSWD: ALL

#or

youruser ALL=(ALL) NOPASSWD: ALL

... or am I missing the plot?

Wizard