sudo does not ask for password [duplicate]
With the command sudo visudo
you can see and edit, the sudo configuration, for example :
# User privilege specification
root ALL=(ALL:ALL) ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) ALL
# Group without password
%nopwd ALL=NOPASSWD: ALL
Your current user is probably member of a privileged group that enables him to enter sudo commands without password. In this example members of admin
and sudo
group can issue any command with sudo, but are prompted with a password ; members of the nopwd
group are not prompted with a password.
Note that the declaration order is relevant for users belonging to multiple groups. Unintuitively, the LAST matching group wins !
In order to require a password, you can add the PASSWD: /usr/bin/apt-get
command specification in file /etc/sudoers
; note that you probably want to allow specific commands with no password, and keep every other command with a password. An example explicitely requesting a password for apt-get:
%users ALL=NOPASSWD: /sbin/reboot, PASSWD: /usr/bin/apt-get
Note that you can personnalize sudo with a much finer granularity than allow all commands like in my first example (doc ubuntu fr)(doc ubuntu en).