Sudo/ru: Difference between revisions

Latest revision as of 20:55, 7 October 2025

Sudo allows a system administrator to delegate authority to give certain users - or groups of users - the ability to run commands as root or another user while providing an audit trail of the commands and their arguments.

Использование

Следующая простая настройка позволит всем пользователям, входящим в группу wheel, выполнять команды, указанные в extraRules, от имени суперпользователя с помощью <codd>sudo без необходимости вводить пароль пользователя.

security.sudo = {
  enable = true;
  extraRules = [{
    commands = [
      {
        command = "${pkgs.systemd}/bin/systemctl suspend";
        options = [ "NOPASSWD" ];
      }
      {
        command = "${pkgs.systemd}/bin/reboot";
        options = [ "NOPASSWD" ];
      }
      {
        command = "${pkgs.systemd}/bin/poweroff";
        options = [ "NOPASSWD" ];
      }
    ];
    groups = [ "wheel" ];
  }];
  extraConfig = with pkgs; ''
    Defaults:picloud secure_path="${lib.makeBinPath [
      systemd
    ]}:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin"
  '';
};

@@ Line 1: / Line 1: @@
 <div lang="en" dir="ltr" class="mw-content-ltr">
 [https://www.sudo.ws Sudo] allows a system
-administrator to delegate authority to give certain users - or groups of users - the ability to run commands as root or another user while providing an audit trail of the commands and their arguments.
+administrator to delegate authority to give certain [[User management|users]] - or groups of users - the ability to run commands as root or another user while providing an audit trail of the commands and their arguments.
 </div>
-<span id="Usage"></span>
+<div class="mw-translate-fuzzy">
 == Использование ==
-<div lang="en" dir="ltr" class="mw-content-ltr">
-Following simple configuration will allow all users which are part of the group <code>wheel</code> to execute commands specified inside <code>extraRules</code> as super user using <code>sudo</code> without the need to supply a user password.
 </div>
+Следующая простая настройка позволит всем пользователям, входящим в группу <code>wheel</code>, выполнять команды, указанные в <code>extraRules</code>, от имени суперпользователя с помощью <codd>sudo</code> без необходимости вводить пароль пользователя.
 <syntaxhighlight lang="nix">
 security.sudo = {