This guide explains how to configure passwordless sudo access for a user on Linux systems, either manually or using our automated script.

• Automated Configuration
• Manual Configuration
• Security Considerations
• Troubleshooting
• Advanced Configuration

1. Download the configuration script:

   curl -O https://raw.githubusercontent.com/1999azzar/passwordless_sudo/master/passwordless_sudo.sh

2. Make it executable:

   chmod +x passwordless_sudo.sh

3. Run the script:

   # Configure for current user
   sudo ./passwordless_sudo.sh
   
   # OR configure for specific user
   sudo ./passwordless_sudo.sh username

• Automatic user detection
• Comprehensive safety checks
• Automatic backup of existing configuration
• Detailed logging
• Configuration testing
• Security settings (session timeout, command logging)

If you prefer to configure passwordless sudo manually, follow these steps:

• Root or sudo access on the system
• Username for configuration
• Basic familiarity with terminal commands

sudo -e /etc/sudoers.d/nopasswd-users

Add your configuration:

# Replace 'username' with your actual username
username ALL=(ALL) NOPASSWD: ALL

sudo chmod 440 /etc/sudoers.d/nopasswd-users
sudo chown root:root /etc/sudoers.d/nopasswd-users

# Check syntax
sudo visudo -c

# Test sudo access
sudo ls /root

⚠️ Important Security Notice

• Passwordless sudo reduces system security
• Only implement on trusted systems
• Consider using command-specific permissions instead of full access
• Regularly audit sudo configurations
• Monitor sudo usage logs

1. Limited Command Access

   username ALL=(ALL) NOPASSWD: /usr/bin/apt, /sbin/reboot

2. Session Timeout

   Defaults:username timestamp_timeout=30

3. Command Logging

   Defaults:username logfile="/var/log/sudo_username.log"

1. Password Still Required

   • Check file permissions
   • Verify syntax
   • Look for conflicting rules

2. Permission Denied

   sudo chmod 440 /etc/sudoers.d/nopasswd-users
   sudo chown root:root /etc/sudoers.d/nopasswd-users

3. Configuration Not Working

   • Check logs: sudo tail -f /var/log/auth.log
   • List sudo rules: sudo -l
   • Verify syntax: sudo visudo -c

# In /etc/sudoers.d/nopasswd-users
Cmnd_Alias SYSTEM_COMMANDS = /usr/bin/apt, /sbin/reboot, /usr/bin/systemctl
username ALL=(ALL) NOPASSWD: SYSTEM_COMMANDS

# Allow all developers passwordless access to specific commands
%developers ALL=(ALL) NOPASSWD: SYSTEM_COMMANDS

# Enhanced logging
Defaults:username log_output
Defaults:username logfile="/var/log/sudo_username.log"
Defaults:username log_year
Defaults:username loglinelen=0

sudo rm /etc/sudoers.d/nopasswd-username

1. Remove custom configuration:

   sudo rm /etc/sudoers.d/nopasswd-users

2. Or comment out specific lines:

   sudo -e /etc/sudoers.d/nopasswd-users
   # Comment out the NOPASSWD line:
   # username ALL=(ALL) NOPASSWD: ALL

1. Use separate files in /etc/sudoers.d/ instead of editing main sudoers file
2. Implement specific command allowances rather than full access
3. Regular security audits
4. Maintain configuration backups
5. Document all changes
6. Monitor sudo usage logs

For additional help:

• System logs: sudo tail -f /var/log/auth.log
• Sudo manual: man sudo
• Sudoers manual: man sudoers
• Distribution documentation

Feel free to submit issues and enhancement requests!

Note: This guide and associated script are provided as-is. Always test in a safe environment first.