Unix:sudo - checking permissions , giving permissions(visudo), configuration files(sudoers.so)

sudo:

To make changes in sudo config, use visudo utility.

________________________________

To list current permissions:

$ sudo -l

Matching Defaults entries for impadmin on this host:

    env_reset,

    secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin

User impadmin may run the following commands on this host:

    (ALL : ALL) ALL

________________________________

'sudo' is located in "/usr/bin/sudo".

1. It must not be writable by any other user except 'root', otherwise none will be able to sudo.  

2. It must have 's' permission for 'root' instead of 'x' permission.

$ ls -l /usr/bin/sudo

-rwsr-xr-x 1 root root 65608 Jan 31 21:14 /usr/bin/sudo

________________________________

File "/usr/lib/sudo/sudoers.so" must only be writable by 'root'.

$ ls -l /usr/lib/sudo/sudoers.so

-rw-r--r-- 1 root root 177452 May 16 10:54 sudoers.so