Re: Apache->CGI script, NOPASSWD is set, but sudo requires auth

 Hello, Todd.
 
On Thu, Mar 05, 2026 at 05:02:35PM -0700, Todd C. Miller wrote:
> What does "sudo -l -U www-data" display on the non-working host
> when run by root?  It sounds like there is a later sudoers entry
> that is matching instead of the NOPASSWD one.

 It displays exactly the same as on working host, I've tried
 an exact copy of file sudoers.d/www-data from good one:

-----------------------------------------------------------------------
Matching Defaults entries for www-data on udev0:
    env_reset,
    secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin,
    use_pty

User www-data may run the following commands on udev0:
    (root) NOPASSWD: /bin/echo
    (root) NOPASSWD: /bin/id
-----------------------------------------------------------------------

 But it still fails under CGI.

 I restarted Apache several times, it does not help. My last idea is
 to reboot non-working host, but if it helps, then source of problem
 will be completely lost...
-- 
 Eugene Berdnikov
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users