Sudo to root, but keep my own aliases?


 
Thread Tools Search this Thread
Top Forums UNIX for Beginners Questions & Answers Sudo to root, but keep my own aliases?
# 1  
Old 02-15-2019
Sudo to root, but keep my own aliases?

I have a coworker that has set up some funky aliases in /etc/bash.alias, and he insists on leaving them that way. For example he aliased "ll" to "ls -lahtr", which really bugs me.

Anyway, I was wondering if there were a way for me to sudo to root without reading /etc/bash.alias, or maybe have it re-source my personal .bashrc file after I sudo to root? I have tried adding an alias of my own for sudo="sudo su -;source /home/user/.bashrc", but that doesn't seem to work. Doesn't read anything after the first sudo command.

Is there a good way to do this so I don't have to use the stupid aliases he sets up?
# 2  
Old 02-15-2019
You should read this:
Bash Startup Files (Bash Reference Manual)

There are lots of ways to get the setup you personally require for a bash session. Check out ~./profile -- the last file to be read and executed if it exists. It will override existing aliases with a new alias command. Read the 3 short sections first. Then try a change.
This User Gave Thanks to jim mcnamara For This Post:
# 3  
Old 02-15-2019
sudoing to root, I find the SUDO_USER=myusername variable in the new environment.
Using your sudo su -, I find

Code:
Feb 15 22:52:56 UsersPC sudo:  myusername : TTY=pts/4 ; PWD=/mnt/9 ; USER=root ; COMMAND=/bin/su -

in /var/log/auth.log


Code:
echo $BASH_VERSION 
4.4.19(1)-release

These 2 Users Gave Thanks to RudiC For This Post:
# 4  
Old 02-16-2019
Quote:
Originally Posted by paqman
I have a coworker that has set up some funky aliases in /etc/bash.alias, and he insists on leaving them that way.
First off: if they are his aliases and are not necessary for the working of the system as a whole they have no business being there. They should go to his profile, rc-script or whatever he uses to configure his session. I would make that absolutely clear to him in your position.

This is something that always put me off on Linux systems: instead of putting what is absolutely necessary into the systems configuration and letting everybody take it from there Linux distributions have usually some guy force what he thinks is fine onto the whole world.

Quote:
Originally Posted by paqman
Anyway, I was wondering if there were a way for me to sudo to root without reading /etc/bash.alias, or maybe have it re-source my personal .bashrc file after I sudo to root?
Using sudo you can find out "where you came from", that is: which user you used to switch into that UID. This way you could set up some mechanism which one (out of several) configurations to apply, as RudiC already hinted at. (Again: only, if his configuration is not mixed up with the systems configuration, so no putting what belongs to /home/<someuser>/.bashrc into /etc/bashrc (or similarily general configuration scripts.)

Second: you can use the "SETENV:" and "NOSETENV:" directives in /etc/sudoers and their respective commandline equivalents ("-E", etc.) for sudo.

I hope this helps.

bakunin
These 3 Users Gave Thanks to bakunin For This Post:
# 5  
Old 02-19-2019
Quote:
Originally Posted by jim mcnamara
You should read this:
Bash Startup Files (Bash Reference Manual)

There are lots of ways to get the setup you personally require for a bash session. Check out ~./profile -- the last file to be read and executed if it exists. It will override existing aliases with a new alias command. Read the 3 short sections first. Then try a change.
Thanks! I'll take a look at that.

Quote:
Originally Posted by bakunin
First off: if they are his aliases and are not necessary for the working of the system as a whole they have no business being there. They should go to his profile, rc-script or whatever he uses to configure his session. I would make that absolutely clear to him in your position.

This is something that always put me off on Linux systems: instead of putting what is absolutely necessary into the systems configuration and letting everybody take it from there Linux distributions have usually some guy force what he thinks is fine onto the whole world.

Using sudo you can find out "where you came from", that is: which user you used to switch into that UID. This way you could set up some mechanism which one (out of several) configurations to apply, as RudiC already hinted at. (Again: only, if his configuration is not mixed up with the systems configuration, so no putting what belongs to /home/<someuser>/.bashrc into /etc/bashrc (or similarily general configuration scripts.)

Second: you can use the "SETENV:" and "NOSETENV:" directives in /etc/sudoers and their respective commandline equivalents ("-E", etc.) for sudo.

I hope this helps.

bakunin
Thank you, I agree with you. This guy is a special breed, thinks he's gods gift to sys admins. His way or the highway. When I first started my instinct was to fight it. Now I find it just easier to just let his thing, and just find ways around it. I may be putting my foot down on this one though. Thanks for the good info.

--- Post updated at 10:19 AM ---

Quote:
Originally Posted by RudiC
sudoing to root, I find the SUDO_USER=myusername variable in the new environment.
Using your sudo su -, I find

Code:
Feb 15 22:52:56 UsersPC sudo:  myusername : TTY=pts/4 ; PWD=/mnt/9 ; USER=root ; COMMAND=/bin/su -

in /var/log/auth.log


Code:
echo $BASH_VERSION 
4.4.19(1)-release

Thanks, I'll look at that. Much appreciated.

Last edited by paqman; 02-19-2019 at 01:27 PM..
This User Gave Thanks to paqman For This Post:
# 6  
Old 02-19-2019
Quote:
Originally Posted by paqman
This guy is a special breed, thinks he's gods gift to sys admins. His way or the highway.
Well, challenge him then: if he is not able to find a solution for the problem of separating his environment from the system environment and still get his environment for his own sessions then he is not gods own gift but simply less accomplished to put it in gentle terms. The ancient greeks (sometimes it pays to have endured four years of ancient greek and 6 years of latin in school) had a word for "layman", "private citizen" (as opposed to "office holder") or, generally, "unskilled [one]". You may want to look it up eventually. ;-))

bakunin
These 2 Users Gave Thanks to bakunin For This Post:
# 7  
Old 02-20-2019
Quote:
Originally Posted by bakunin
Well, challenge him then: if he is not able to find a solution for the problem of separating his environment from the system environment and still get his environment for his own sessions then he is not gods own gift but simply less accomplished to put it in gentle terms. The ancient greeks (sometimes it pays to have endured four years of ancient greek and 6 years of latin in school) had a word for "layman", "private citizen" (as opposed to "office holder") or, generally, "unskilled [one]". You may want to look it up eventually. ;-))

bakunin
Ha, well I actually just told him I was going to change it back, and he just shrugged and let it go. Which is funny because when I talked to him about it the other day he was pretty adamant about leaving it. Anyway, I really didn't want to jump through a bunch of hoops to accomplish it, so it works out that he just let it go.

The funny thing is, he's really not unskilled, he's pretty good at his job, problem is he knows it, and is very condescending and just very short with everyone. Thanks for the suggestions everyone, wish I could say I used them to come up with a cool solution, when really I just needed to deal with the human aspect. :-)
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

Sudo access of rm to non-root user

Hello, It is Solaris-10. There is a file as /opt/vpp/dom1.2/pdd/today_23. It is always generated by root, so owned by root only. This file has to be deleted as part of application restart always and that is done by app_user and SA is always involved to do rm on that file. Is it possible to give... (9 Replies)
Discussion started by: solaris_1977
9 Replies

2. UNIX for Beginners Questions & Answers

Sudo asked for root password .

i have tried to use a sudo command from a user level . but instead of asking for user password it asked for root password . how should i go about it . james@opensuse:/etc> sudo ifconfig root's password: And i wish to ask how should i allow a list of command to be allowed to used for a... (4 Replies)
Discussion started by: lobsang
4 Replies

3. Red Hat

Sudo to user other than root but do not allow sudo to root

I have a set of RHEL 5 boxes running our ERP software on Oracle databases. I need to allow my DBA's to su to oracle and one other account (banner) without knowing the oracle or banner password. But I need to prevent them from su'ing to any other user especially root. I only want them to be able to... (1 Reply)
Discussion started by: westmoreland
1 Replies

4. Cybersecurity

Root acces bug through sudo!

My friend has found a bug with sudo. His organization has Linux laptops with no root access to users. Policy pushing is through Puppet. But doing sudo sudo twice he is able to access root. Do you guys have any clue, how's that possible, usually sudo su is restricted. (8 Replies)
Discussion started by: nixhead
8 Replies

5. UNIX for Dummies Questions & Answers

Create user with sudo ability to root.

Hi All, I need to give an user sudo ability to root. We have also generated RSA key but unable to proceed further. For example after a user logs into the server normally and when he executes below command $ssh root@server_name This should take you to root prompt # Please help me.... (3 Replies)
Discussion started by: Rockyc3400
3 Replies

6. UNIX for Dummies Questions & Answers

sudo on becoming root

Anyone able to explain why if i run "sudo -i" or "sudo -s" i am able to get into root by just keying my own password? How to avoid this from happening coz i need all the users to use su - only. (2 Replies)
Discussion started by: timmywong
2 Replies

7. UNIX for Dummies Questions & Answers

Sudo to delegate permission from non-root user to another non-root user

I've been through many threads before i decide to create a separate thread. I can't really find the solution to my (simple) problem. Here's what I'm trying to achieve: As "canar" user I want to run a command, let's say "/opt/ocaml/bin/ocaml" as "duck" user. The only to achieve this is to... (1 Reply)
Discussion started by: canar
1 Replies

8. UNIX for Dummies Questions & Answers

sudo/root access

I'm actually working with a Ubuntu-System here and have a question about executing a command with 'sudo'. I tried and got a error message like "not allowed". After this I logged in with 'sudo -s' and typed the command without 'sudo'. This worked well. Can please somebody explain me this... (0 Replies)
Discussion started by: daWonderer
0 Replies

9. AIX

sudo must be setuid root.

Guy's I'm trying to add some lines in sudo by useing this command visudo # User privilege specification root ALL=(ALL) ALL # Uncomment to allow people in group wheel to run all commands # %wheel ALL=(ALL) ALL # Same thing without a password # %wheel ALL=(ALL) NOPASSWD: ALL #... (5 Replies)
Discussion started by: ITHelper
5 Replies

10. Linux

sudo, root password

Hi all.. I'm secering a RH 2.1 server, with gnome (not my choice...), as X manager. Is ther anyway to get sudo ask for root password other then the actual user's password? Like when you launch the graphical IHM to create a new user, it asks for root's password? Is there a way to do the same... (5 Replies)
Discussion started by: penguin-friend
5 Replies
Login or Register to Ask a Question