My "/etc/sudoers" says "user ALL=(ALL) NOPASSWD: ALL", what does it mean?

thomas.bucaioni

It looks like the user can do the same as root and needs not enter a password?

coop

yes. otherwise sudo would prompt for a password. this is an ill-advised choice that should never be done on a [production system. feel free to excise the password option! i would have done this a long time ago but no one seems to have devastated by it so far. but yes, this violates security 101

thomas.bucaioni

As it's for training on Aws, does it matter? To connect, I need an ssh key already so the sudo caveat shouldn't be a big security issue?

coop

Somebody else can correct me, but I think AWS already has as sudo configured so the worst thing is you would have to type in a password so I would do nothing

thomas.bucaioni

Cool, felt a bit lazy about fixing this (besides, I haven't a clue what the password is)... Thank you for your insight