{"id":122962,"date":"2026-11-06T03:57:36","date_gmt":"2026-11-05T19:57:36","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/122962.html"},"modified":"2026-11-06T03:57:36","modified_gmt":"2026-11-05T19:57:36","slug":"linux-sudo-%e4%b8%8e-su-%e6%93%8d%e4%bd%9c","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/122962.html","title":{"rendered":"LInux | sudo \u4e0e su \u64cd\u4f5c"},"content":{"rendered":"

sudo \u4e0e su \u64cd\u4f5c\u624b\u518c<\/h2>\n

\u76ee\u5f55<\/h3>\n
  • sudoers \u914d\u7f6e<\/li>\n
  • sudo \u5e38\u7528\u64cd\u4f5c<\/li>\n
  • sudo \u5b89\u5168\u673a\u5236<\/li>\n
  • sudo \u9ad8\u7ea7\u7528\u6cd5<\/li>\n
  • \u5b89\u5168\u89c4\u8303<\/li>\n
  • \u6545\u969c\u6392\u67e5<\/li>\n
  • \u540c\u7c7b\u5de5\u5177\u5bf9\u6bd4<\/li>\n
  • su\u3001sudo \u73af\u5883\u4e0e PATH \u884c\u4e3a<\/li>\n
    \n

    1 sudoers \u914d\u7f6e<\/h3>\n

    sudo \u7684\u6743\u9650\u63a7\u5236\u4f9d\u6258 \/etc\/sudoers，\u6587\u4ef6\u9ed8\u8ba4\u6743\u9650 440\u3002<\/p>\n

    \u4e0d\u76f4\u63a5\u4f7f\u7528 vi\u3001vim \u7f16\u8f91，\u8bed\u6cd5\u9519\u8bef\u4f1a\u9020\u6210 sudo \u4e0d\u53ef\u7528；\u7f16\u8f91\u7edf\u4e00\u4f7f\u7528 visudo，\u8be5\u5de5\u5177\u5185\u7f6e\u8bed\u6cd5\u6821\u9a8c\u3002<\/p>\n

    # \u666e\u901a\u7528\u6237\u6267\u884c，\u9700\u8981\u5df2\u6709 sudo \u6743\u9650<\/span>
    \nsudo<\/span> visudo
    \n# root \u76f4\u63a5\u6267\u884c<\/span>
    \nvisudo<\/p>\n

    \u7f16\u8f91\u5b8c\u6210，vi \u6a21\u5f0f\u4e0b\u6309 Esc，\u8f93\u5165 :wq \u4fdd\u5b58\u9000\u51fa\u3002<\/p>\n

    \u5b58\u5728\u8bed\u6cd5\u9519\u8bef\u65f6\u7ec8\u7aef\u8f93\u51fa syntax error，\u9700\u8981\u4fee\u6b63\u540e\u91cd\u65b0\u4fdd\u5b58\u3002<\/p>\n

    1.1 sudoers \u6587\u4ef6\u7ed3\u6784<\/h4>\n

    \u6587\u4ef6\u5206\u4e3a Defaults\u3001\u7528\u6237\u6743\u9650\u3001\u7ec4\u6743\u9650\u4e09\u6bb5\u3002\u901a\u7528\u89c4\u5219\u683c\u5f0f：<\/p>\n

    \u7528\u6237\/\u7ec4 \u4e3b\u673a =（\u8eab\u4efd） \u53ef\u6267\u884c\u547d\u4ee4 # \u4e3a\u6ce8\u91ca\u6807\u8bb0\u3002<\/p>\n

    # Defaults \u6bb5：\u5168\u5c40\u884c\u4e3a\u63a7\u5236
    \nDefaults env_reset
    \nDefaults mail_badpass
    \nDefaults secure_path="\/usr\/local\/sbin:\/usr\/local\/bin:\/usr\/sbin:\/usr\/bin:\/sbin:\/bin"
    \nDefaults timestamp_timeout=15
    \nDefaults env_keep += "SSH_AUTH_SOCK"<\/p>\n

    # \u7528\u6237\u6743\u9650\u89c4\u5219
    \nroot ALL=(ALL:ALL) ALL<\/p>\n

    # \u7ec4\u6743\u9650\u89c4\u5219，\u7ec4\u540d\u524d\u7f00 %
    \n%wheel ALL=(ALL:ALL) ALL
    \n%sudo ALL=(ALL:ALL) ALL<\/p>\n

    \u5b57\u6bb5\u91ca\u4e49：<\/p>\n

      \n
    • \u4e3b\u673a：\u89c4\u5219\u751f\u6548\u4e3b\u673a\u8303\u56f4<\/li>\n
    • (ALL:ALL)：\u53ef\u5207\u6362\u7528\u6237:\u53ef\u5207\u6362\u7ec4<\/li>\n
    • ALL：\u4ee3\u8868\u5168\u90e8\u547d\u4ee4<\/li>\n<\/ul>\n

      1.2 \u914d\u7f6e\u573a\u666f<\/h4>\n

      1.2.1 \u6388\u4e88\u5b8c\u6574 sudo \u6743\u9650<\/h5>\n

      \u65b9\u5f0f\u4e00：\u52a0\u5165\u7cfb\u7edf\u6388\u6743\u7ec4<\/p>\n

      # Ubuntu<\/span>
      \nusermod<\/span> -aG<\/span> sudo<\/span> test<\/span>
      \n# CentOS \/ RHEL<\/span>
      \nusermod<\/span> -aG<\/span> wheel test<\/span><\/p>\n

      \u65b9\u5f0f\u4e8c：\u76f4\u63a5\u5199\u5165 sudoers<\/p>\n

      test ALL=(ALL:ALL) ALL<\/p>\n

      1.2.2 \u9650\u5b9a\u53ef\u6267\u884c\u547d\u4ee4<\/h5>\n

      \u547d\u4ee4\u5fc5\u987b\u586b\u5199\u7edd\u5bf9\u8def\u5f84，\u53ef\u643a\u5e26\u53c2\u6570\u5b9e\u73b0\u7cbe\u786e\u5339\u914d\u3002<\/p>\n

      test ALL=(ALL:ALL) \/usr\/bin\/systemctl restart nginx, \/sbin\/ifconfig eth0, \/sbin\/ifup eth0<\/p>\n

      \u4ec5\u5141\u8bb8\u6307\u5b9a\u547d\u4ee4\u514d\u5bc6\u6267\u884c：<\/p>\n

      deploy ALL=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx<\/p>\n

      1.2.3 \u514d\u5bc6\u7801\u6388\u6743<\/h5>\n

      # \u5168\u90e8\u547d\u4ee4\u514d\u5bc6
      \ntest ALL=(ALL:ALL) NOPASSWD: ALL
      \n# \u6307\u5b9a\u547d\u4ee4\u514d\u5bc6
      \ntest ALL=(ALL:ALL) NOPASSWD: \/usr\/sbin\/reboot, \/usr\/bin\/systemctl restart nginx<\/p>\n

      1.2.4 \u9650\u5b9a\u5207\u6362\u76ee\u6807\u7528\u6237<\/h5>\n

      test ALL=(nginx:ALL) ALL<\/p>\n

      \u8be5\u914d\u7f6e\u4e0b\u7528\u6237\u4ec5\u53ef\u5207\u6362\u81f3 nginx，\u65e0\u6cd5\u5207\u6362\u81f3 root\u3002<\/p>\n

      1.2.5 \u9ed1\u540d\u5355\u7ba1\u63a7<\/h5>\n

      ! \u6807\u8bb0\u7981\u6b62\u9879；\u9ed1\u540d\u5355\u6761\u76ee\u7f6e\u4e8e\u767d\u540d\u5355\u4e4b\u540e，\u89c4\u5219\u4ece\u4e0a\u81f3\u4e0b\u987a\u5e8f\u5339\u914d\u3002<\/p>\n

      %sudo ALL=(ALL:ALL) ALL, !\/usr\/bin\/rm -rf *
      \ntest ALL=(ALL:ALL) ALL, !\/usr\/sbin\/visudo<\/p>\n

      1.2.6 \u522b\u540d\u5b9a\u4e49<\/h5>\n

      \u522b\u540d\u540d\u79f0\u4f7f\u7528\u5927\u5199，\u5206\u4e3a User_Alias\u3001Cmnd_Alias\u3001Host_Alias\u3002<\/p>\n

      User_Alias OPS = user1, user2, user3
      \nCmnd_Alias PACKAGES = \/usr\/bin\/apt, \/usr\/bin\/yum, \/usr\/bin\/dnf
      \nCmnd_Alias SERVICES = \/usr\/bin\/systemctl, \/usr\/sbin\/service
      \nOPS ALL=(ALL:ALL) PACKAGES, SERVICES<\/p>\n

      1.3 \u4e3b\u673a\u5b57\u6bb5\u5339\u914d\u89c4\u5219<\/h4>\n

      \u4e3b\u673a\u5b57\u6bb5\u5728\u672c\u673a\u5b8c\u6210\u5339\u914d，\u5339\u914d\u5bf9\u8c61\u4e3a\u4e3b\u673a\u540d\u3001FQDN\u3001IP\u3002\u652f\u6301\u4ee5\u4e0b\u7c7b\u578b：<\/p>\n

    • \u77ed\u4e3b\u673a\u540d \/ FQDNtest web01=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n
    • \u5355\u4e2a IPtest 192.168.1.10=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n
    • CIDR \u7f51\u6bb5test 192.168.1.0\/24=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n
    • Host_AliasHost_Alias WEBS = web01, web02, web03, 192.168.1.10, 192.168.1.11
      \ntest WEBS=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n
    • Netgroup（NIS\/\u57df\u73af\u5883，\u524d\u7f00 +）test +webservers=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n
    • \u53d6\u53cd !test ALL,!web03=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n
    • \u9017\u53f7\u5206\u9694\u4e3b\u673a\u5217\u8868test web01,web02,192.168.1.20=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx\n <\/li>\n

      \u4e3b\u673a\u540d\u89e3\u6790\u4f9d\u8d56 \/etc\/hosts \u6216 DNS，\u89e3\u6790\u5f02\u5e38\u4f1a\u9020\u6210\u5339\u914d\u5931\u8d25\u3002<\/p>\n

      1.4 \u591a\u4e3b\u673a\u90e8\u7f72\u65b9\u6848<\/h4>\n
        \n
      • \u5c0f\u89c4\u6a21\u96c6\u7fa4：\u5206\u53d1\u4e3b sudoers \u6587\u4ef6，\u6216\u5728 \/etc\/sudoers.d\/ \u4e0b\u653e\u72ec\u7acb\u89c4\u5219\u6587\u4ef6，\u4f7f\u7528 Ansible \u63a8\u9001<\/li>\n
      • \u5927\u89c4\u6a21\u57df\u73af\u5883：LDAP \u96c6\u4e2d\u7ef4\u62a4 sudoHost<\/li>\n<\/ul>\n

        \u63a8\u8350\u5c06\u81ea\u5b9a\u4e49\u89c4\u5219\u653e\u5165 \/etc\/sudoers.d\/，\u4e0d\u4fee\u6539\u4e3b\u6587\u4ef6，\u4fbf\u4e8e\u5206\u53d1\u4e0e\u56de\u6eda\u3002<\/p>\n

        visudo -f<\/span> \/etc\/sudoers.d\/90_custom_rules<\/p>\n

        \u6a21\u677f：<\/p>\n

        deploy web01,web02=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx, \/usr\/bin\/tar<\/p>\n

        \u914d\u7f6e\u5b8c\u6210\u540e，\u5207\u6362\u5bf9\u5e94\u7528\u6237\u6267\u884c sudo -l \u6821\u9a8c\u6743\u9650\u3002<\/p>\n

        1.5 sudo \u6267\u884c\u6d41\u7a0b<\/h4>\n

        #mermaid-svg-GODb4VugpWdzvx7p{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-GODb4VugpWdzvx7p .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-GODb4VugpWdzvx7p .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-GODb4VugpWdzvx7p .error-icon{fill:#552222;}#mermaid-svg-GODb4VugpWdzvx7p .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-GODb4VugpWdzvx7p .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-GODb4VugpWdzvx7p .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-GODb4VugpWdzvx7p .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-GODb4VugpWdzvx7p .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-GODb4VugpWdzvx7p .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-GODb4VugpWdzvx7p .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-GODb4VugpWdzvx7p .marker{fill:#333333;stroke:#333333;}#mermaid-svg-GODb4VugpWdzvx7p .marker.cross{stroke:#333333;}#mermaid-svg-GODb4VugpWdzvx7p svg{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-GODb4VugpWdzvx7p p{margin:0;}#mermaid-svg-GODb4VugpWdzvx7p .label{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;color:#333;}#mermaid-svg-GODb4VugpWdzvx7p .cluster-label text{fill:#333;}#mermaid-svg-GODb4VugpWdzvx7p .cluster-label span{color:#333;}#mermaid-svg-GODb4VugpWdzvx7p .cluster-label span p{background-color:transparent;}#mermaid-svg-GODb4VugpWdzvx7p .label text,#mermaid-svg-GODb4VugpWdzvx7p span{fill:#333;color:#333;}#mermaid-svg-GODb4VugpWdzvx7p .node rect,#mermaid-svg-GODb4VugpWdzvx7p .node circle,#mermaid-svg-GODb4VugpWdzvx7p .node ellipse,#mermaid-svg-GODb4VugpWdzvx7p .node polygon,#mermaid-svg-GODb4VugpWdzvx7p .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-GODb4VugpWdzvx7p .rough-node .label text,#mermaid-svg-GODb4VugpWdzvx7p .node .label text,#mermaid-svg-GODb4VugpWdzvx7p .image-shape .label,#mermaid-svg-GODb4VugpWdzvx7p .icon-shape .label{text-anchor:middle;}#mermaid-svg-GODb4VugpWdzvx7p .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-GODb4VugpWdzvx7p .rough-node .label,#mermaid-svg-GODb4VugpWdzvx7p .node .label,#mermaid-svg-GODb4VugpWdzvx7p .image-shape .label,#mermaid-svg-GODb4VugpWdzvx7p .icon-shape .label{text-align:center;}#mermaid-svg-GODb4VugpWdzvx7p .node.clickable{cursor:pointer;}#mermaid-svg-GODb4VugpWdzvx7p .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-GODb4VugpWdzvx7p .arrowheadPath{fill:#333333;}#mermaid-svg-GODb4VugpWdzvx7p .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-GODb4VugpWdzvx7p .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-GODb4VugpWdzvx7p .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-GODb4VugpWdzvx7p .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-GODb4VugpWdzvx7p .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-GODb4VugpWdzvx7p .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-GODb4VugpWdzvx7p .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-GODb4VugpWdzvx7p .cluster text{fill:#333;}#mermaid-svg-GODb4VugpWdzvx7p .cluster span{color:#333;}#mermaid-svg-GODb4VugpWdzvx7p div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-GODb4VugpWdzvx7p .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-GODb4VugpWdzvx7p rect.text{fill:none;stroke-width:0;}#mermaid-svg-GODb4VugpWdzvx7p .icon-shape,#mermaid-svg-GODb4VugpWdzvx7p .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-GODb4VugpWdzvx7p .icon-shape p,#mermaid-svg-GODb4VugpWdzvx7p .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-GODb4VugpWdzvx7p .icon-shape .label rect,#mermaid-svg-GODb4VugpWdzvx7p .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-GODb4VugpWdzvx7p .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-GODb4VugpWdzvx7p .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-GODb4VugpWdzvx7p :root{–mermaid-font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;}<\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u5931\u8d25<\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u6210\u529f<\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u672a\u6388\u6743<\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u5df2\u6388\u6743<\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u666e\u901a\u7528\u6237<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u8f93\u5165\u547d\u4ee4<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        sudo<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u9a8c\u8bc1\u7528\u6237\u8eab\u4efd<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u9a8c\u8bc1\u7ed3\u679c<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u5bc6\u7801\u9519\u8bef<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u9000\u51fa<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u68c0\u67e5\u6388\u6743\u89c4\u5219<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u6388\u6743\u7ed3\u679c<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u62d2\u7edd\u6267\u884c<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u4ee5\u6307\u5b9a\u7528\u6237\u6267\u884c<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u8fd4\u56de\u7ed3\u679c<\/p>\n

        <\/span><\/p>\n

        <\/p>\n

        \u7ed3\u675f<\/p>\n

        <\/span><\/p>\n

        1.6 sudoers \u914d\u7f6e\u7ea6\u675f<\/h4>\n
          \n
        • \u547d\u4ee4\u4f7f\u7528\u7edd\u5bf9\u8def\u5f84，\u5e26\u53c2\u6570\u6761\u76ee\u4e3a\u7cbe\u786e\u5339\u914d<\/li>\n
        • NOPASSWD \u4ec5\u7528\u4e8e\u4fe1\u4efb\u4e3b\u4f53\u4e0e\u81ea\u52a8\u5316\u573a\u666f<\/li>\n
        • \u522b\u540d\u7edf\u4e00\u5927\u5199<\/li>\n
        • \u4fee\u6539\u540e\u6267\u884c sudo -l \u9a8c\u8bc1<\/li>\n<\/ul>\n
          \n

          2 sudo \u5e38\u7528\u64cd\u4f5c<\/h3>\n

          \u901a\u7528\u8bed\u6cd5：sudo [\u9009\u9879] \u547d\u4ee4<\/p>\n

          2.1 \u5207\u6362 root shell<\/h4>\n

          sudo<\/span> -i<\/span>
          \nsudo<\/span> su<\/span> –
          \nsudo<\/span> -s<\/span>
          \nexit<\/span><\/p>\n

          2.2 \u6307\u5b9a\u8eab\u4efd\u6267\u884c<\/h4>\n

          sudo<\/span> -u<\/span> nginx \/usr\/sbin\/nginx
          \nsudo<\/span> -u<\/span> www-data ls<\/span> -l<\/span> \/var\/www\/html
          \nsudo<\/span> -u<\/span> nginx whoami<\/span><\/p>\n

          2.3 \u67e5\u770b\u6743\u9650\u6e05\u5355<\/h4>\n

          sudo<\/span> -l<\/span><\/p>\n

          2.4 \u5bc6\u7801\u7f13\u5b58\u63a7\u5236<\/h4>\n

          # \u5237\u65b0\u7f13\u5b58\u8ba1\u65f6，\u91cd\u65b0\u6821\u9a8c\u5bc6\u7801<\/span>
          \nsudo<\/span> -v<\/span>
          \n# \u6e05\u9664\u5bc6\u7801\u7f13\u5b58<\/span>
          \nsudo<\/span> -k<\/span><\/p>\n

          2.5 \u591a\u6761\u547d\u4ee4\u6279\u91cf\u6267\u884c<\/h4>\n

          sudo<\/span> bash<\/span> -c<\/span> 'apt update -y && apt upgrade -y && systemctl restart sshd'<\/span><\/p>\n

          2.6 \u4fdd\u7559\u73af\u5883\u53d8\u91cf<\/h4>\n

          sudo<\/span> -E<\/span> \/usr\/local\/nginx\/sbin\/nginx -s<\/span> reload
          \nsudo<\/span> -E<\/span> env<\/span> |<\/span> grep<\/span> PATH<\/span><\/p>\n

          \n

          3 sudo \u5b89\u5168\u673a\u5236<\/h3>\n

          3.1 \u5bc6\u7801\u8d85\u65f6<\/h4>\n

          \u9ed8\u8ba4 timestamp_timeout=15，\u5355\u4f4d\u5206\u949f\u3002<\/p>\n

          Defaults timestamp_timeout=30
          \nDefaults timestamp_timeout=0
          \nDefaults timestamp_timeout=-1<\/p>\n

            \n
          • 0：\u6bcf\u6b21\u8c03\u7528\u5747\u6821\u9a8c\u5bc6\u7801<\/li>\n
          • -1：\u6c38\u4e45\u7f13\u5b58<\/li>\n<\/ul>\n

            3.2 \u5ba1\u8ba1\u65e5\u5fd7<\/h4>\n

            \u9ed8\u8ba4\u8def\u5f84：<\/p>\n

              \n
            • CentOS \/ RHEL：\/var\/log\/secure<\/li>\n
            • Ubuntu \/ Debian：\/var\/log\/auth.log<\/li>\n<\/ul>\n

              \u81ea\u5b9a\u4e49\u65e5\u5fd7\u914d\u7f6e：<\/p>\n

              Defaults logfile="\/var\/log\/sudo.log"
              \nDefaults log_format="%u : %h : %t : %p : %m"<\/p>\n

              \u68c0\u7d22\u547d\u4ee4：<\/p>\n

              grep<\/span> sudo<\/span> \/var\/log\/secure
              \ngrep<\/span> sudo<\/span> \/var\/log\/auth.log
              \ntail<\/span> -f<\/span> \/var\/log\/sudo.log
              \ngrep<\/span> "rm -rf"<\/span> \/var\/log\/sudo.log<\/p>\n

              3.3 \u73af\u5883\u53d8\u91cf\u7ba1\u63a7<\/h4>\n

              Defaults env_reset
              \nDefaults env_keep += "SSH_AUTH_SOCK"
              \nDefaults secure_path="\/usr\/local\/sbin:\/usr\/local\/bin:\/usr\/sbin:\/usr\/bin:\/sbin:\/bin"<\/p>\n

              env_reset \u5f00\u542f\u65f6\u6e05\u7406\u7528\u6237\u73af\u5883；secure_path \u5355\u72ec\u8986\u76d6 PATH，\u9632\u6b62\u8def\u5f84\u52ab\u6301\u3002<\/p>\n

              PATH \u76f8\u5173\u6545\u969c：\u7a0b\u5e8f\u4e0d\u5728 secure_path \u5185，sudo \u63d0\u793a command not found\u3002\u5904\u7406\u65b9\u5f0f：<\/p>\n

            • \u8c03\u7528\u7edd\u5bf9\u8def\u5f84<\/li>\n
            • sudo -E<\/li>\n
            • \u4fee\u6539 secure_path<\/li>\n
              \n

              4 \u9ad8\u7ea7\u7528\u6cd5<\/h3>\n

              4.1 \u8fdc\u7aef SSH \u63d0\u6743\u6267\u884c<\/h4>\n

              \u524d\u7f6e：SSH \u514d\u5bc6\u901a\u9053\u3002<\/p>\n

              test ALL=(ALL:ALL) \/usr\/bin\/ssh root@192.168.1.100<\/p>\n

              sudo<\/span> ssh<\/span> root@192.168.1.100
              \nsudo<\/span> ssh<\/span> root@192.168.1.100 'systemctl restart nginx'<\/span><\/p>\n

              4.2 \u81ea\u52a8\u5316\u811a\u672c<\/h4>\n

              \u9075\u5faa\u6700\u5c0f\u6743\u9650，\u4ec5\u5f00\u653e\u811a\u672c\u6240\u9700\u547d\u4ee4\u514d\u5bc6：<\/p>\n

              test ALL=(ALL:ALL) NOPASSWD: \/usr\/bin\/systemctl restart nginx, \/usr\/bin\/tar, \/bin\/rm<\/p>\n

              \n

              5 \u5b89\u5168\u89c4\u8303<\/h3>\n
            • \u9075\u5faa\u6700\u5c0f\u6743\u9650，\u907f\u514d NOPASSWD: ALL\u3001ALL \u5168\u6743\u9650<\/li>\n
            • SSH \u914d\u7f6e PermitRootLogin no，\u7981\u6b62 root \u76f4\u63a5\u5bc6\u7801\u767b\u5f55<\/li>\n
            • \u5b9a\u671f\u5ba1\u8ba1 sudo \u65e5\u5fd7<\/li>\n
            • \u4fdd\u6301 \/etc\/sudoers \u6743\u9650 440<\/li>\n
            • \u81ea\u52a8\u5316\u3001cron \u573a\u666f\u6ce8\u91ca Defaults requiretty<\/li>\n
            • \u811a\u672c\u7981\u6b62\u660e\u6587\u5199\u5165\u5bc6\u7801<\/li>\n
            • \u53ca\u65f6\u5347\u7ea7 sudo \u8f6f\u4ef6\u5305，\u4fee\u590d\u6f0f\u6d1e<\/li>\n
            • \u591a\u4e3b\u673a\u573a\u666f\u4f7f\u7528\u5821\u5792\u673a\u96c6\u4e2d\u5ba1\u8ba1<\/li>\n
            • \u5468\u671f\u6027\u6e05\u7406\u5931\u6548\u6743\u9650\u3001\u79bb\u804c\u7528\u6237\u89c4\u5219<\/li>\n
              \n

              6 \u6545\u969c\u6392\u67e5<\/h3>\n

              6.1 xxx is not in the sudoers file<\/h4>\n

              \u7528\u6237\u672a\u52a0\u5165\u6388\u6743\u7ec4\u3001\u65e0\u5339\u914d sudoers \u89c4\u5219\u3002<\/p>\n

              su<\/span> – root
              \nusermod<\/span> -aG<\/span> sudo<\/span> test<\/span>
              \nusermod<\/span> -aG<\/span> wheel test<\/span>
              \nvisudo
              \ntest<\/span> ALL<\/span>=<\/span>(<\/span>ALL:ALL)<\/span> ALL<\/p>\n

              \u4fee\u6539\u540e\u91cd\u65b0\u767b\u5f55\u7528\u6237\u3002<\/p>\n

              6.2 must have a tty to run sudo<\/h4>\n

              sudoers \u542f\u7528 requiretty，\u975e\u4ea4\u4e92\u5f0f\u573a\u666f\u62a5\u9519\u3002<\/p>\n

              # Defaults requiretty<\/p>\n

              6.3 unable to resolve host<\/h4>\n

              \/etc\/hosts \u7f3a\u5c11\u4e3b\u673a\u540d\u6620\u5c04，\u8865\u5145\u6761\u76ee：<\/p>\n

              127.0.0.1 localhost linux-server
              \n::1 localhost linux-server<\/p>\n

              6.4 command not found<\/h4>\n
                \n
              • \u7a0b\u5e8f\u672a\u5b89\u88c5<\/li>\n
              • \u7a0b\u5e8f\u8def\u5f84\u4e0d\u5728 secure_path<\/li>\n
              • \u672a\u4f7f\u7528\u7edd\u5bf9\u8def\u5f84<\/li>\n<\/ul>\n

                6.5 password incorrect<\/h4>\n
                  \n
                • \u8f93\u5165\u5927\u5c0f\u5199\u3001\u7279\u6b8a\u5b57\u7b26\u9519\u8bef<\/li>\n
                • \u7528\u6237\u5bc6\u7801\u8fc7\u671f，chage -l test \u67e5\u770b，passwd test \u4fee\u6539<\/li>\n
                • sudoers \u8bed\u6cd5\u9519\u8bef，visudo -c \u6821\u9a8c<\/li>\n
                • \u7528\u6237\u540d\u3001\u7ec4\u540d\u62fc\u5199\u9519\u8bef<\/li>\n<\/ul>\n

                  6.6 sudo \u6574\u4f53\u5931\u6548<\/h4>\n

                  \u4f18\u5148\u6267\u884c\u8bed\u6cd5\u6821\u9a8c：<\/p>\n

                  visudo -c<\/span><\/p>\n

                    \n
                  • \u53ef su – root：root \u767b\u5f55\u540e\u4fee\u590d\u914d\u7f6e<\/li>\n
                  • su \u540c\u6837\u4e0d\u53ef\u7528：\u8fdb\u5165\u5355\u7528\u6237\u6a21\u5f0f\u4fee\u590d \u9644\u52a0\u68c0\u67e5\u9879：\u6587\u4ef6\u6743\u9650 440\u3001\u5305\u91cd\u88c5\u3001\u78c1\u76d8\u7a7a\u95f4\u3001\u6587\u4ef6\u7cfb\u7edf\u53ea\u8bfb\u72b6\u6001<\/li>\n<\/ul>\n

                    6.7 \u4fee\u6539\u5bc6\u7801\u540e sudo \u9a8c\u8bc1\u5931\u8d25<\/h4>\n

                    \u7f13\u5b58\u65e7\u5bc6\u7801，\u6e05\u9664\u7f13\u5b58：<\/p>\n

                    sudo<\/span> -k<\/span><\/p>\n

                    6.8 sudo \u6267\u884c\u5361\u4f4f<\/h4>\n
                      \n
                    • Ctrl+C \u7ec8\u6b62\u8fdb\u7a0b<\/li>\n
                    • \u68c0\u67e5\u7cfb\u7edf\u8d1f\u8f7d top<\/li>\n
                    • \u68c0\u67e5\u65e5\u5fd7\u6587\u4ef6\u5199\u5165\u6743\u9650<\/li>\n
                    • SSH \u8fdc\u7aef\u6267\u884c\u6dfb\u52a0 -t \u5206\u914d TTY<\/li>\n
                    • journalctl -u sudo \u67e5\u770b\u65e5\u5fd7<\/li>\n<\/ul>\n
                      \n

                      7 \u540c\u7c7b\u5de5\u5177\u5bf9\u6bd4<\/h3>\n

                      7.1 su<\/h4>\n

                      \u539f\u751f\u5207\u6362\u7528\u6237\u5de5\u5177；su – root \u9700\u8981 root \u5bc6\u7801；\u65e0\u7ec6\u7c92\u5ea6\u6743\u9650\u63a7\u5236，\u5ba1\u8ba1\u80fd\u529b\u5f31\u3002\u9002\u5408\u5355\u4e3b\u673a\u5e94\u6025\u3002<\/p>\n

                      7.2 doas<\/h4>\n

                      OpenBSD \u9879\u76ee，\u914d\u7f6e\u7b80\u6d01，\u4f53\u79ef\u66f4\u5c0f；\u4e3b\u6d41\u53d1\u884c\u7248\u4e0d\u9884\u88c5\u3002<\/p>\n

                      apt<\/span> install<\/span> doas
                      \nyum install<\/span> doas<\/p>\n

                      \u914d\u7f6e\u6587\u4ef6 \/etc\/doas.conf<\/p>\n

                      permit test as root cmd nginx<\/p>\n

                      7.3 pkexec<\/h4>\n

                      PolicyKit \u7ec4\u4ef6，\u9762\u5411\u56fe\u5f62\u4f1a\u8bdd\u63d0\u6743；\u670d\u52a1\u5668\u7ec8\u7aef\u573a\u666f\u4e0d\u9002\u7528\u3002<\/p>\n

                      pkexec gedit \/etc\/hosts<\/p>\n

                      \n

                      8 su\u3001sudo \u73af\u5883\u4e0e PATH \u884c\u4e3a<\/h3>\n

                      8.1 \u57fa\u7840\u91ca\u4e49<\/h4>\n
                        \n
                      • su：switch user，\u5207\u6362\u7528\u6237<\/li>\n
                      • sudo：superuser do，\u4ee5\u8d85\u7ea7\u7528\u6237\u8eab\u4efd\u6267\u884c\u547d\u4ee4<\/li>\n
                      • -（su -）：–login，\u767b\u5f55\u5f0f\u5207\u6362，\u52a0\u8f7d\u76ee\u6807\u7528\u6237\u914d\u7f6e，\u8fdb\u5165\u76ee\u6807\u7528\u6237\u5bb6\u76ee\u5f55<\/li>\n
                      • -i（sudo -i）：\u4ea4\u4e92\u5f0f\u767b\u5f55 shell<\/li>\n
                      • -s（sudo -s）：\u542f\u52a8 shell，\u4e0d\u6267\u884c\u767b\u5f55\u521d\u59cb\u5316<\/li>\n<\/ul>\n

                        8.2 root \u5207\u6362\u65b9\u5f0f\u5bf9\u6bd4<\/h4>\n\n\u547d\u4ee4\u6a21\u5f0f\u5de5\u4f5c\u76ee\u5f55\u73af\u5883\u6765\u6e90PATH \u884c\u4e3a\u9700\u8981 root \u5bc6\u7801<\/tr>\n\n\n\n\n\n\n\n
                        su<\/td>\n\u975e\u767b\u5f55 shell<\/td>\n\u4fdd\u6301\u539f\u76ee\u5f55<\/td>\n\u7ee7\u627f\u5f53\u524d\u7528\u6237\u5927\u90e8\u5206\u73af\u5883\u53d8\u91cf；\u901a\u5e38\u52a0\u8f7d\u76ee\u6807\u7528\u6237 ~\/.bashrc<\/td>\n\u4fdd\u7559\u539f\u7528\u6237 PATH<\/td>\n<\/td>\n<\/tr>\n
                        su – \/ su -l \/ su – root<\/td>\n\u767b\u5f55 shell<\/td>\n\/root<\/td>\n\u52a0\u8f7d root \u7684 \/etc\/profile\u3001~\/.profile\/~\/.bash_profile，\u901a\u5e38\u518d source ~\/.bashrc<\/td>\n\u4f7f\u7528 root \u767b\u5f55\u73af\u5883 PATH<\/td>\n<\/td>\n<\/tr>\n
                        sudo cmd<\/td>\nsudo \u5355\u6b21\u6267\u884c<\/td>\n\u4fdd\u6301\u539f\u76ee\u5f55<\/td>\n\u53d7 env_reset \u9650\u5236，\u4ec5\u4fdd\u7559\u5c11\u91cf\u53d8\u91cf；\u53ef\u901a\u8fc7 env_keep \/ -E \u4fdd\u7559\u6307\u5b9a\u53d8\u91cf<\/td>\n\u9ed8\u8ba4\u4f7f\u7528 secure_path<\/td>\n<\/td>\n<\/tr>\n
                        sudo -i<\/td>\n\u6a21\u62df root \u767b\u5f55 shell<\/td>\n\/root<\/td>\n\u6784\u9020 root \u767b\u5f55\u73af\u5883，\u8bfb\u53d6 root \u767b\u5f55\u914d\u7f6e\u6587\u4ef6<\/td>\n\u63a5\u8fd1 root \u767b\u5f55 PATH，\u4f46\u53ef\u80fd\u53d7 secure_path \u5f71\u54cd<\/td>\n<\/td>\n<\/tr>\n
                        sudo su –<\/td>\n\u767b\u5f55 shell<\/td>\n\/root<\/td>\n\u5148\u901a\u8fc7 sudo \u63d0\u6743，\u518d\u6267\u884c su -，\u52a0\u8f7d root \u767b\u5f55\u914d\u7f6e<\/td>\n\u4e0e su – \u57fa\u672c\u4e00\u81f4<\/td>\n<\/td>\n<\/tr>\n
                        sudo -s<\/td>\n\u975e\u767b\u5f55 root shell<\/td>\n\u4fdd\u6301\u539f\u76ee\u5f55（HOME \u901a\u5e38\u4ecd\u4e3a\u8c03\u7528\u8005）<\/td>\n\u53d7 sudoers \u73af\u5883\u89c4\u5219\u7ea6\u675f；\u901a\u5e38\u53ea\u52a0\u8f7d root ~\/.bashrc<\/td>\n\u53d7 secure_path \/ env_reset \u7ea6\u675f<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                        \u6ce8：sudo su – \u4e0e sudo -i \u6700\u7ec8\u90fd\u80fd\u83b7\u5f97 root \u767b\u5f55\u73af\u5883，\u4f46 sudo -i \u66f4\u76f4\u63a5，\u53ea\u4ea7\u751f\u4e00\u5c42 sudo \u8fdb\u7a0b；<\/p>\n

                        sudo su – \u4f1a\u5148\u63d0\u6743\u518d\u8c03\u7528 su，\u5c5e\u4e8e\u5197\u4f59\u5199\u6cd5\u3002<\/p>\n

                          \n
                        • su \u7cfb\u5217\u9700\u8981\u77e5\u9053 \u76ee\u6807\u7528\u6237\u5bc6\u7801；sudo \u7cfb\u5217\u901a\u5e38\u9a8c\u8bc1 \u5f53\u524d\u7528\u6237\u5bc6\u7801，\u5e76\u4f9d\u8d56 \/etc\/sudoers \u6388\u6743\u3002<\/li>\n
                        • sudo \u9ed8\u8ba4\u542f\u7528 env_reset，\u5e76\u901a\u8fc7 secure_path \u9650\u5236 PATH；\u8fd9\u662f sudo cmd \u627e\u4e0d\u5230\u81ea\u5b9a\u4e49\u547d\u4ee4\u7684\u5e38\u89c1\u539f\u56e0\u3002<\/li>\n
                        • \u751f\u4ea7\u73af\u5883\u5efa\u8bae\u4f18\u5148\u4f7f\u7528 sudo \/ sudo -i，\u907f\u514d\u76f4\u63a5\u4f7f\u7528 su \u6216 sudo su -，\u4fbf\u4e8e\u5ba1\u8ba1\u548c\u6743\u9650\u63a7\u5236\u3002<\/li>\n<\/ul>\n

                          \u9000\u51fa\u547d\u4ee4\u7edf\u4e00\u4e3a：<\/p>\n

                          exit<\/span><\/p>\n

                          8.3 PATH \u95ee\u9898\u5904\u7406\u65b9\u6848（\u4fb5\u5165\u6027\u5347\u5e8f）<\/h4>\n
                        • \u5355\u6b21\u4f20\u9012 PATH<\/li>\n

                          sudo<\/span> env<\/span> PATH<\/span><\/span>=<\/span>"$PATH<\/span>"<\/span> my_command
                          \nsudo<\/span> env<\/span> PATH<\/span><\/span>=<\/span>"$PATH<\/span>"<\/span> env<\/span> |<\/span> grep<\/span> ^PATH<\/span><\/p>\n

                        • \u8c03\u7528\u7edd\u5bf9\u8def\u5f84<\/li>\n

                          sudo<\/span> $(<\/span>which<\/span> my_command)<\/span><\/span><\/p>\n

                        • \u8f6f\u94fe\u63a5\u81f3 secure_path \u76ee\u5f55<\/li>\n

                          sudo<\/span> ln<\/span> -s<\/span> \/usr\/local\/bin\/cmd \/usr\/sbin\/cmd<\/p>\n

                        • \u4fee\u6539 secure_path（\u5168\u5c40）<\/li>\n

                          Defaults secure_path = \/sbin:\/bin:\/usr\/sbin:\/usr\/bin:\/usr\/local\/bin<\/p>\n

                          echo<\/span> 'Defaults secure_path="\/sbin:\/bin:\/usr\/sbin:\/usr\/bin:\/usr\/local\/bin"'<\/span> |<\/span> sudo<\/span> tee<\/span> \/etc\/sudoers.d\/custom_path<\/p>\n

                        • sudo -i，\u4f7f\u7528 root \u767b\u5f55\u73af\u5883<\/li>\n
                        • env_keep \u4fdd\u7559 PATH（\u5b58\u5728\u52ab\u6301\u98ce\u9669，\u4e0d\u63a8\u8350\u5e38\u89c4\u4f7f\u7528）<\/li>\n

                          Defaults env_keep += "PATH"<\/p>\n

                        • shell \u522b\u540d<\/li>\n

                          alias<\/span> psudo<\/span>=<\/span>'sudo env PATH="$PATH"'<\/span>
                          \npsudo my_command<\/p>\n

                          8.4 PATH \u52ab\u6301\u539f\u7406<\/h4>\n

                          \u7528\u6237\u53ef\u63a7 PATH \u4e2d\u5305\u542b\u53ef\u5199\u76ee\u5f55\u65f6，\u540c\u540d\u6076\u610f\u7a0b\u5e8f\u4f1a\u4f18\u5148\u5339\u914d\u5e76\u4ee5 root \u6743\u9650\u8fd0\u884c\u3002secure_path \u4ec5\u4f7f\u7528\u7ba1\u7406\u5458\u7ba1\u63a7\u76ee\u5f55，\u963b\u65ad\u8be5\u94fe\u8def\u3002<\/p>\n

                          8.5 \u6392\u67e5\u9879<\/h4>\n
                            \n
                          • sudo -V | grep PATH \u67e5\u770b secure_path<\/li>\n
                          • \u533a\u5206\u4e24\u7c7b\u95ee\u9898：sudo \u7a0b\u5e8f\u68c0\u7d22\u5931\u8d25\u3001\u7a0b\u5e8f\u5185\u90e8\u5b50\u8fdb\u7a0b PATH \u7f3a\u5931<\/li>\n
                          • \u4f18\u5148\u4f7f\u7528\u5355\u6b21 env \u4f20\u9012\u6216\u7edd\u5bf9\u8def\u5f84，\u51cf\u5c11\u5168\u5c40\u53d8\u66f4<\/li>\n<\/ul>\n

                            \u5982\u679c\u4f60\u9700\u8981，\u6211\u53ef\u4ee5\u5355\u72ec\u5bfc\u51fa\u4e00\u4efd\u53ef\u76f4\u63a5\u6253\u5370\u7684\u7cbe\u7b80\u901f\u67e5\u7248（\u53ea\u4fdd\u7559\u8868\u683c\u3001\u5e38\u7528\u547d\u4ee4\u3001\u6545\u969c\u6e05\u5355）\u3002<\/p>\n

                            \n

                            Reference<\/h2>\n
                              \n
                            • command line – Environment variables when run with \u2018sudo\u2019 – Ask Ubuntu https:\/\/askubuntu.com\/questions\/57915\/environment-variables-when-run-with-sudo<\/li>\n
                            • linux – Why are PATH variables different when running via sudo and su? – Unix & Linux Stack Exchange https:\/\/unix.stackexchange.com\/questions\/8646\/why-are-path-variables-different-when-running-via-sudo-and-su<\/li>\n
                            • environment variables – Why does sudo change the PATH? – Stack Overflow https:\/\/stackoverflow.com\/questions\/257616\/why-does-sudo-change-the-path<\/li>\n
                            • How to make sudo preserve $PATH? – Unix & Linux Stack Exchange https:\/\/unix.stackexchange.com\/questions\/83191\/how-to-make-sudo-preserve-path<\/li>\n
                            • linux – Why are PATH variables different when running via sudo and su? – Unix & Linux Stack Exchange https:\/\/unix.stackexchange.com\/questions\/8646\/why-are-path-variables-different-when-running-via-sudo-and-su<\/li>\n
                            • security – Which is the safest way to get root privileges: sudo, su or login? – Unix & Linux Stack Exchange https:\/\/unix.stackexchange.com\/questions\/8581\/which-is-the-safest-way-to-get-root-privileges-sudo-su-or-login<\/li>\n
                            • sudo \u547d\u4ee4\u5b8c\u5168\u6307\u5357：\u4ece\u5165\u95e8\u5230\u7cbe\u901a https:\/\/mp.weixin.qq.com\/s\/CbTSZvrDQzDiBrc6wE_2Yg<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                              sudo \u4e0e su \u64cd\u4f5c\u624b\u518c
                              \n\u76ee\u5f55
                              \nsudoers \u914d\u7f6esudo \u5e38\u7528\u64cd\u4f5csudo \u5b89\u5168\u673a\u5236sudo \u9ad8\u7ea7\u7528\u6cd5\u5b89\u5168\u89c4\u8303\u6545\u969c\u6392\u67e5\u540c\u7c7b\u5de5\u5177\u5bf9\u6bd4su\u3001sudo \u73af\u5883\u4e0e PATH \u884c\u4e3a 1 sudoers \u914d\u7f6e
                              \nsudo \u7684\u6743\u9650\u63a7\u5236\u4f9d\u6258 \/etc\/sudoers，\u6587\u4ef6\u9ed8\u8ba4\u6743\u9650 440\u3002
                              \n\u4e0d\u76f4\u63a5\u4f7f\u7528 vi\u3001vim \u7f16\u8f91，\u8bed\u6cd5\u9519\u8bef\u4f1a\u9020\u6210 sudo \u4e0d\u53ef\u7528；\u7f16\u8f91\u7edf\u4e00\u4f7f\u7528 visudo，\u8be5\u5de5\u5177\u5185\u7f6e\u8bed\u6cd5\u6821\u9a8c\u3002
                              \n# \u666e\u901a\u7528\u6237\u6267\u884c&<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[14048],"topic":[],"class_list":["post-122962","post","type-post","status-publish","format-standard","hentry","category-server","tag-sudo--su-"],"yoast_head":"\nLInux | sudo \u4e0e su \u64cd\u4f5c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/122962.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LInux | sudo \u4e0e su \u64cd\u4f5c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"sudo \u4e0e su \u64cd\u4f5c\u624b\u518c \u76ee\u5f55 sudoers \u914d\u7f6esudo \u5e38\u7528\u64cd\u4f5csudo \u5b89\u5168\u673a\u5236sudo \u9ad8\u7ea7\u7528\u6cd5\u5b89\u5168\u89c4\u8303\u6545\u969c\u6392\u67e5\u540c\u7c7b\u5de5\u5177\u5bf9\u6bd4su\u3001sudo \u73af\u5883\u4e0e PATH \u884c\u4e3a 1 sudoers \u914d\u7f6e sudo \u7684\u6743\u9650\u63a7\u5236\u4f9d\u6258 \/etc\/sudoers，\u6587\u4ef6\u9ed8\u8ba4\u6743\u9650 440\u3002 \u4e0d\u76f4\u63a5\u4f7f\u7528 vi\u3001vim \u7f16\u8f91，\u8bed\u6cd5\u9519\u8bef\u4f1a\u9020\u6210 sudo \u4e0d\u53ef\u7528；\u7f16\u8f91\u7edf\u4e00\u4f7f\u7528 visudo，\u8be5\u5de5\u5177\u5185\u7f6e\u8bed\u6cd5\u6821\u9a8c\u3002 # \u666e\u901a\u7528\u6237\u6267\u884c&\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/122962.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-05T19:57:36+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/122962.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/122962.html\",\"name\":\"LInux | sudo \u4e0e su \u64cd\u4f5c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-11-05T19:57:36+00:00\",\"dateModified\":\"2026-11-05T19:57:36+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/122962.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/122962.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/122962.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LInux | sudo \u4e0e su \u64cd\u4f5c\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LInux | sudo \u4e0e su \u64cd\u4f5c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/122962.html","og_locale":"zh_CN","og_type":"article","og_title":"LInux | sudo \u4e0e su \u64cd\u4f5c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"sudo \u4e0e su \u64cd\u4f5c\u624b\u518c \u76ee\u5f55 sudoers \u914d\u7f6esudo \u5e38\u7528\u64cd\u4f5csudo \u5b89\u5168\u673a\u5236sudo \u9ad8\u7ea7\u7528\u6cd5\u5b89\u5168\u89c4\u8303\u6545\u969c\u6392\u67e5\u540c\u7c7b\u5de5\u5177\u5bf9\u6bd4su\u3001sudo \u73af\u5883\u4e0e PATH \u884c\u4e3a 1 sudoers \u914d\u7f6e sudo \u7684\u6743\u9650\u63a7\u5236\u4f9d\u6258 \/etc\/sudoers，\u6587\u4ef6\u9ed8\u8ba4\u6743\u9650 440\u3002 \u4e0d\u76f4\u63a5\u4f7f\u7528 vi\u3001vim \u7f16\u8f91，\u8bed\u6cd5\u9519\u8bef\u4f1a\u9020\u6210 sudo \u4e0d\u53ef\u7528；\u7f16\u8f91\u7edf\u4e00\u4f7f\u7528 visudo，\u8be5\u5de5\u5177\u5185\u7f6e\u8bed\u6cd5\u6821\u9a8c\u3002 # \u666e\u901a\u7528\u6237\u6267\u884c&","og_url":"https:\/\/www.wsisp.com\/helps\/122962.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-11-05T19:57:36+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"9 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/122962.html","url":"https:\/\/www.wsisp.com\/helps\/122962.html","name":"LInux | sudo \u4e0e su \u64cd\u4f5c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-11-05T19:57:36+00:00","dateModified":"2026-11-05T19:57:36+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/122962.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/122962.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/122962.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"LInux | sudo \u4e0e su \u64cd\u4f5c"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/122962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=122962"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/122962\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=122962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=122962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=122962"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=122962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}