Change between user and root without password

Question

How to ensure that all identity changes for a privileged user account belonging to the wheel group on a privileged user account are performed without having to provide a password without deleting the password for the root account?

Solution

It sounds like you want these users accounts to be able to sudo to root with out providing a password. If this is the case, this is actually quite easy.

You can create a file in /etc/sudoers.d to define the sudo behaviour and also to define sudo perimissions.

Say you have an account named a account defined named lindsay. You want Lindsay to have sudo access, without needing to type in her password when using sudo. To accomplish this you would do the following:

1. Create a new file in /etc/sudoers.d using your favourite text editor. In my example I'll create a file in this location named lindsay since that'll help to remember what this is for later.
2. Add the following single line of text to the newly created file and save the changes.

lindsay ALL=(ALL) NOPASSWD:ALL

3. Next we need to set permissions of 0400 on this file:

chmod 0400 /etc/sudoers.d/lindsay

That's it! Our user Lindsay will now be able to sudo to root without re-authenticating by typing in her password. You can find more details about the syntax and some examples in the link below.

Be aware of the security implications of doing this since you are intentionally weakening the security of your Ubuntu installation.

Cheers!

Sudoers - Community Help Wiki

Comments

[Aargonian]

AFAIK there is no way to do such a thing, and it would be a bad idea if you could. The entire point of having a separate root account and a password for said account is that you need to be very intentional. What if you were logged in as this privileged user, and you went afk while forgetting to log out? Someone could very easily use your account to gain root access, create a backdoor into your system, and exit and you may be none the wiser if they did so fast enough. Not to say I would be necessarily surprised if some way to do this /does/ exist, but I don't think it would be a good idea.

[KonradDos]

I know its bad idea, but i am using virtual machine to learn that. I need to know it to pass my exams in near future.

[ridgy]

I'm not really sure whatyou are asking for. But as far as I understand, you could manage that by adding the wheel group to the /etc/sudoers file with option NOPASSWD - see man sudoers.

[Panther]

You should be using visudo to make edits the reason being that visudo checks syntax. If you do not use visudo , and make a typo, you will break sudo. You can then only fix things by booting to recovery mode.