Table of Contents

1. Challenge

   Configure `sudo` to Create an `ADMINUSER` `User_Alias` Containing `testuser` and an `ADMINTASKS` `Cmnd_Alias` for the Required Commands. Verify `testuser` Can Complete the Commands.

   1. Edit the sudoers file:

      sudo -i visudo
      

   2. Edit the contents of the file so it contains these lines in the appropriate sections (Hint: Use / to find the areas, and there are three lines of content to be added.):

      User_Alias ADMINUSER = testuser
      Cmd_Alias ADMINTASKS = /usr/sbin/useradd, /bin/passwd, sudoedit /etc/hosts
      ADMINUSER ALL=ADMINTASKS
      

   3. Comment out the following lines (Defaults targetpw may not exist):

      #Defaults targetpw
      #ALL ALL=(ALL)ALL
      

   4. Save the file and verify testuser is able to create a user:

      su testuser   #password is P@ssw0rd
      sudo useradd someuser
      

   5. See if someuser appears in /etc/passwd:

      grep some /etc/passwd
      

2. Challenge

   Grant `admin_user` the Same Permissions as the `root` User

   1. As the cloud_user, edit sudoers:

      visudo
      

   2. Copy the root entry to the next line and substitute admin_user for root in the user position:

      root ALL=(ALL)ALL
      admin_user ALL=(ALL)All
      

   3. Save and exit, and then become the admin_user:

      su admin_user 
      

   4. Run visudo to see if you are allowed:

      sudo visudo
      

   5. Exit the file.