Basically, topic.

I'd like to make sudo require 2 passwords (root & user) to execute a command. I know NOTHING of security (cept the obvious bits), and being able to do such seems like a fairly good idea from my stand point.

I'm not sure you can do that with the existing sudo. The point of using sudo is to make it so users can run some of root's commands without having root access. If they had to use the root password to use sudo, that sort of defeats the purpose because they could just su to root (they have the password).

The idea of sudo is to only allow users to run certain commands. Thus if you setup sudo, don't use the default file which lists users like username ALL=(ALL) ALL because that would give that user access to all of root's commands. What you want to do is give them only as much access as they need, such as username ALL= /sbin/reboot which would only give the user the ability to reboot the machine.

if you give a user root password then they dont need sudo. the point of sudo is so you dont have to give someone who only needs access to cups, root priviledges for the whole system.

If you want better security force good passwords. Remember one 8 digit password is harder to crack than two 4 digit ones.


Soule