I am running a Ubuntu 12.04 LTS server. Today I have been doing some maintenance to the server, and a security audit.
I realized that sudo is not working the way I expected it to. In the default sudoers file (visudo) it says that members of the group admin is able to gain root privileges and members of the group sudo is able to sudo.
My own user is only member of my users default group, but is still able to both sudo and use su.
What an I missing?
This is my sudoers file:
Defaults env_reset Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" # Host alias specification # User alias specification # Cmnd alias specification # User privilege specification root ALL=(ALL:ALL) ALL # Members of the admin group may gain root privileges %admin ALL=(ALL) ALL # Allow members of group sudo to execute any command %sudo ALL=(ALL:ALL) ALL # See sudoers(5) for more information on "#include" directives: #includedir /etc/sudoers.d