Parrot Community

Community portal of the Parrot Project.

You are not logged in.

Announcement

Welcome Aboard Pirate!

Support us on Patreon and contribute to our project!

HappyHacking!

#1 2018-01-10 00:58:49

no0b
Community Member
Registered: 2017-12-14
Posts: 134

Disabling sudo password prompt on User, is it bad ?

Whenever i use things that need sudo in terminal, it prompt me for a password obviously, while with GUI applications i can choose 'save for this session'.

So if my current sudo state is

Matching Defaults entries for user on pc:
    env_reset, mail_badpass,
    secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin

User user may run the following commands on pc:
    (ALL : ALL) ALL
    (ALL : ALL) NOPASSWD: ALL


Is it bad habit ? I thought that typing each time my account password is annoying and also risky if in a public place, and that as long as no one except I go on the computer it's not that bad ? I'm new and i appreciate any advices.

Last edited by no0b (2018-01-10 00:59:08)

Offline

#2 2018-01-17 01:53:17

Akito
Administrator
From: Germany
Registered: 2017-03-23
Posts: 30

Re: Disabling sudo password prompt on User, is it bad ?

Depends very much on your use. If you sit often in public and don't fear for your laptop of being stolen, then it might not be bad. But usually it is recommended that you leave it on, because it is generally more secure, especially if you handle dangerous or vulnerable applications on your OS.


Knowledge is an anti-capitalistic commodity.
BURST: BURST-AA9W-74EX-KZNE-4ST7K

GPG Fingerprint: 290A C689 2EB1 45F6 5E74  2C11 99B1 2DF0 E85A E4E6
GPG Info: http://pgp.mit.edu/pks/lookup?op=vindex … F0E85AE4E6
GPG Key: http://pgp.mit.edu/pks/lookup?op=get&se … F0E85AE4E6

Offline

#3 2018-01-17 15:12:23

no0b
Community Member
Registered: 2017-12-14
Posts: 134

Re: Disabling sudo password prompt on User, is it bad ?

Thanks that's what i thought, i don't understand though, as long i shutdown my computer when not on it, if someone steals it, it won't help him that i disabled the sudo prompt since he will need to have my password anyway to log in on my account right ?

As for my important stuff, i encrypt files so it's easy on ressources/hard drives, and easier to access. But its true that there's often meta data to find.

Last edited by no0b (2018-01-17 15:12:59)

Offline

Board footer

Powered by FluxBB

Design by Klocek.