Score:0

Ubuntu

Why sudo requires user password and not root password?

Yaniv G

4/7/23, 10:56 AM

I was trying to understand why "su" fails and "sudo " is successful.

So, since the root account is disabled by default, the "su" command fails. fair enough.

But the thing that I can't get my grip on is the following:

When a user is trying to execute a command with root privileges a "sudo" is required. I would expect the prompt password to be asking for the "root password" (which at this point, by default, is not set) - as the root privileges are about to be given temporarily to the user.

However, what actually happens is that the user is asked to enter his own password. Could someone explain the logic in this process?

247

0 + 0

permissions

command-line

sudo

password

N0rbert

4/7/23, 11:00 AM

Does this answer your question? [How can I determine the sudo password?](https://askubuntu.com/questions/297046/how-can-i-determine-the-sudo-password)

Yaniv G

4/7/23, 11:05 AM

Actually no. I'm not trying to understand "how to", but "why" sudo command is asking for the user password rather than the root password, considering root privileges are about to be given to the user.

muru

4/7/23, 11:13 AM

That is how `sudo` is configured by default - you're trusting the user, so ask for the user's password to verify that it is indeed them. You can use `targetpw` to ask for the target user's password if you want

Martin Thornton

4/7/23, 12:38 PM

Does this answer your question? [Sudo is also user login password - why? how to change?](https://askubuntu.com/questions/490746/sudo-is-also-user-login-password-why-how-to-change)

Score:11

Ubuntu

vanadium

4/7/23, 11:43 AM

Any user that has been granted permissions by a system administrator can use the sudo command to perform actions with root privileges. su, on the other hand, can be accessed only by users knowing the password of the target account.

sudo allows a privileged user to execute a command as another user. If no user is specified, then that other user will be root. The user needs to give his/her password. The security system then checks whether that user has permission to act as root.
su allows to temporarily become another user to execute commands. If no user is specified, then the user will be root. Thus, the password of the target user needs to be entered. On Ubuntu, a su to become root will not work, because the root account is by default not enabled - you can't login to it. You can however open a root shell with sudo -i, if you have the priviledges. This way, you run a shell with root privileges without being logged in to a root account.

The first user created on a freshly installed Ubuntu system, user 1000, automatically is allowed to use sudo to gain root privileges. Any other user must explicitly be granted "sudo" permissions by a user that already has such permissions. Users without such permission will not be able to use sudo to execute commands with root privileges.

0 + 0

Yaniv G

4/7/23, 12:14 PM

My point is that any user knows his password, so practically any user can gain root permission when he desires.

muru

4/7/23, 12:50 PM

@YanivG how did you come by that conclusion? You have to specify which users or groups you trust and with what in `sudoers` - do you just blindly allow all users to use `sudo` for anything?

Organic Marble

4/7/23, 1:26 PM

Thanks for the clear explanation. Perhaps the OP is overlooking the fact that *an administrator had to allow the user to use sudo in the first place* (grant the permissions)

vanadium

4/7/23, 1:42 PM

I emphasized that aspect, and included some detail.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Why sudo requires user password and not root password?

TH: ทำไม sudo ต้องการรหัสผ่านผู้ใช้และไม่ใช่รหัสผ่านรูท

RO: De ce sudo necesită o parolă de utilizator și nu o parolă de root?

RU: Почему sudo требует пароль пользователя, а не пароль root?

VI: Tại sao Sudo yêu cầu mật khẩu người dùng chứ không phải mật khẩu gốc?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.