How do I make someone a sudo user?

by

Granting sudo (superuser) privileges to a user in Linux allows them to perform administrative tasks that require higher-level permissions. This guide will walk you through the process of making someone a sudo user in Linux, ensuring clarity and ease of understanding.

Understanding Key Terms

  • Sudo: Short for “superuser do,” sudo allows a permitted user to execute commands as the superuser or another user, as specified by the security policy.
  • Root User: The administrative user in Linux with unrestricted access to all commands and files.
  • Usermod: A command used to modify a user account in Linux.
  • Sudoers File: A configuration file that determines which users have sudo privileges and what commands they can run.

Prerequisites

Before you begin, ensure you have:

  1. Root or existing sudo user access.
  2. Access to the terminal.

Step-by-Step Guide to Make Someone a Sudo User

1. Open the Terminal

Access the terminal on your Linux system. You can do this by searching for “terminal” in your applications menu or using the shortcut Ctrl + Alt + T.

2. Create a New User (Optional)

If the user does not already exist, you can create a new user. For example, to create a user named newuser, use the following command:

sudo adduser newuser

Explanation:

  • sudo: Executes the command with superuser privileges.
  • adduser: The command used to create a new user.
  • newuser: The username for the new user.

Follow the prompts to set the password and additional information for the new user.

3. Add the User to the Sudo Group

To grant sudo privileges to a user, you need to add them to the sudo group. For example, to grant sudo privileges to a user named newuser, use the following command:

sudo usermod -aG sudo newuser

Explanation:

  • sudo: Executes the command with superuser privileges.
  • usermod: The command used to modify a user account.
  • -aG: The -a option appends the user to the specified group(s), while the -G option specifies the group(s) to which the user is being added.
  • sudo: The group to which the user is being added.
  • newuser: The username of the user.

4. Verify the User’s Sudo Privileges

To ensure the user now has sudo privileges, switch to the user account:

su - newuser

Then, run a command with sudo to check if it executes correctly. For example:

sudo whoami

Explanation:

  • su - newuser: Switches to the user account of newuser.
  • sudo whoami: Runs the whoami command with sudo privileges to display the effective username. If the user has sudo privileges, the output will be root.

Additional Tips

  • Editing the Sudoers File: For specific sudo permissions, you can edit the sudoers file using the visudo command, which safely edits the file to prevent syntax errors.
  sudo visudo

Add the following line to grant specific command permissions:

  newuser ALL=(ALL) NOPASSWD: /path/to/command

Explanation:

  • newuser: The username of the user being granted specific sudo permissions.
  • ALL=(ALL) NOPASSWD: Allows the user to run the specified command without being prompted for a password.
  • /path/to/command: The specific command the user can run.
  • Removing Sudo Privileges: To remove sudo privileges from a user, use the deluser command:
  sudo deluser newuser sudo

Explanation:

  • deluser: The command used to delete a user from a group.
  • newuser: The username of the user.
  • sudo: The group from which the user is being removed.

Conclusion

Making someone a sudo user in Linux is a straightforward process that involves adding the user to the sudo group. By following this guide, you can efficiently manage administrative privileges on your Linux system, ensuring both security and convenience. Proper management of sudo users helps maintain a secure and well-administered system, preventing unauthorized or accidental changes.