This bug has been migrated to another issue tracking site. It has been closed here and may no longer be being monitored.

If you would like to get updates for this issue, or to participate in it, you may do so at Red Hat Issue Tracker .
Bug 2100960 - adding user to the wheel group does not permit sudo access
Summary: adding user to the wheel group does not permit sudo access
Keywords:
Status: CLOSED MIGRATED
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: sudo
Version: 8.5
Hardware: Unspecified
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Radovan Sroka
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-06-24 19:19 UTC by Alok Sharma
Modified: 2023-08-16 14:42 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-08-16 14:42:13 UTC
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker   RHEL-1366 0 None None None 2023-08-16 14:42:12 UTC
Red Hat Issue Tracker RHELPLAN-126277 0 None None None 2022-06-24 19:36:41 UTC
Red Hat Issue Tracker SECENGSP-4658 0 None None None 2022-06-26 11:46:59 UTC

Comment 1 Martin Pitt 2022-06-25 16:14:50 UTC 
This should not (primarily) depend on authselect. ID 1022 sounds like a local user, not one centrally managed by FreeIPA. Do you have some customized sudoers file? The default /etc/sudoers has this rule:

    ## Allows people in group wheel to run all commands
    %wheel	ALL=(ALL)	ALL

Does that exist for you? If so, then this is somehow a sudo bug (and I'll reassign). Otherwise, do you remember customizing it? If you definitively didn't, I'll reassign to authselect. Cockpit does not touch sudoers, and IMHO the UI is rightful to assume that wheel membership means administrative rights, as per documentation [1].

Thanks!

[1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_basic_system_settings/managing-sudo-access_configuring-basic-system-settings
Comment 3 Martin Pitt 2022-06-26 11:42:29 UTC 
Thanks -- this all looks expected. At this point I'm afraid I don't know how to debug this further. sudo maintainers, is there a way to make sudo more verbose?
Comment 4 Radovan Sroka 2023-08-16 14:36:02 UTC 
This bug is going to be migrated.

Contact point for migration questions or issues: rsroka
Guidance for Bugzilla users to test their Jira account or create one if needed:

https://redhat.service-now.com/help?id=kb_article_view&sysparm_article=KB0016394
https://redhat.service-now.com/help?id=kb_article_view&sysparm_article=KB0016694
https://redhat.service-now.com/help?id=kb_article_view&sysparm_article=KB0016774
Note You need to log in before you can comment on or make changes to this bug.