• Important: We recently upgraded our forum software - please let us know if you run into any issues.

secondary super user

Alicelinux

New Member
we already have root account, we want to create another root user , by using user add command, it will create a normal user, then we change group to root,

is there a simple step we can directly create another super user by using user add? ,
 


arochester

Moderator
Staff member
Gold Supporter
Do you use sudo already?

AS ROOT the command in the Terminal is

Code:
usermod -a -G sudo <username>
Replace <username> with the username to which you want to grant sudo access.

Now logout & login to get sudo access to those users.
 

JasKinasis

Well-Known Member
I agree with arochester.
Any users requiring root permissions should be added to the sudo group.

Additionally, the actual root account itself should be disabled - that should help prevent unauthorized users (like your hacker nuisances ) from being able to directly access the root account.

Also there are other measures like: disabling root login for SSH connections, using cryptographic keys for SSH connections instead of a password based login. That would also help keep hackers at bay.

See here:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/4/html/Security_Guide/s2-wstation-privileges-noroot.html
 

Alicelinux

New Member
no, I want second root, not through sudo, i want another root, for example xyz with uid=0, group id=0, root group
 

JasKinasis

Well-Known Member
AFAIK, there can be only one root user. Adding an ordinary user and adding them to the sudo group is one way of allowing a user to access root privileges. I don't know what the effect of adding them to the root group would be.

If you're worried about the root account being compromised, you could try resetting the password for the root account. Then create a user with sudo privileges and use that account to disable the root account and then perhaps limit the permissions of the rogue account you spotted, or simply remove it altogether, if you haven't already!
 

Alicelinux

New Member
thanks, but the point is if i add one user abc, password 1234 and use
usermod -a -G sudo abc, but user abc don't know root password, he can't have root priviliedges, my goal is to let user abc to have all root priviledges without knowing root password
 

wizardfromoz

Super Moderator
Staff member
Gold Supporter
Can you not do something like?:

in /etc/sudoers

Code:
%group ALL=(ALL) NOPASSWD: ALL

#or

youruser ALL=(ALL) NOPASSWD: ALL
... or am I missing the plot?

Wizard
 

Staff online

Members online


Top