sudoers: how to disable requiretty per user

Question

I don't want to comment out the line in /etc/sudoers:

Defaults    requiretty

Instead, I only want a certain user not to require a tty. How can this be done?

score 96 · Accepted Answer · answered Feb 09 '10 at 13:02

96

You said that you want one particular user to not require a tty. That's the default behavior. Nevertheless, you can explicitly set that like this:

Defaults:username !requiretty

If you want everyone else to require a tty, then you'll have to uncommment the line.

answered Feb 09 '10 at 13:02

Dennis Williamson

13

Btw., requiretty is active per default on RHEL5. Good to know its not like that in other distributions. – user27451 Feb 13 '10 at 14:11
This one might help someone. http://serverfault.com/questions/72708/execute-su-c-over-ssh – Senthil Kumar Mar 08 '12 at 10:49

score 6 · Answer 2 · answered Sep 12 '17 at 23:22

6

RedHat now recommends removing 'Defaults requiretty', conforming with the source code defaults. In Security Advisory RHSA-2016:2593, Redhat patched /etc/sudoers, removing line 'Defaults requiretty'

Also, per user requiretty exceptions DO NOT WORK for RHEL/CENTOS 7 (sudo 1.8.6p7)

answered Sep 12 '17 at 23:22

Nomen Nescio

This is really great info but does not technically answer the question. – HarlemSquirrel Oct 02 '17 at 15:24
2

Do you have a link to a ticket about per user defaults not working on RHEL/CENTOS 7 ? Or maybe a link to release notes saying this has been fixed post 1.8.6p7 ? I'm not seeing anything about it under https://www.sudo.ws/stable.html – pwan Oct 04 '17 at 19:17

2 Answers2