Mastering sudo: 5 Real‑World Scenarios to Elevate Your Linux Permissions

Scenario 1: User without root permission

When a regular user lacks permission to access a file or run a command, adding sudo before the command temporarily elevates privileges. Historically su required the root password, but sudo lets users gain rights without knowing it.

Permissions are defined in /etc/sudoers. To grant a single user:

Explanation of the fields:

guohl – the username allowed to use sudo

ALL – any terminal (any machine) may invoke sudo

(ALL) – sudo may run commands as any user

ALL – any command may be executed

To restrict user test on host guohl-pc to only /bin/chown and /bin/chmod as root, add a line like:

Group‑based rules replace the username with %group. Users in the sudo group inherit the same permissions, as shown by checking /etc/group.

Scenario 2: Forgetting sudo while editing with vim

If you edit a file in vim and try to save with :wq but lack write permission, you can avoid reopening the file by running: :w !sudo tee % This writes the buffer through sudo tee, granting root rights for the save operation.

Scenario 3: Forgetting sudo before a long command

When a command fails due to insufficient privileges, the usual fix is to recall the previous command with the up‑arrow and prepend sudo. A quicker shortcut is: sudo !! Here !! expands to the last command, executing it with root rights.

Scenario 4: Using sudo with shell built‑ins

Shell built‑ins (e.g., cd, alias) are executed directly by the shell and cannot be prefixed with sudo. To run such a command with elevated rights, first obtain a root shell: sudo bash After entering the root shell, any subsequent command runs as root without needing to repeat sudo.

You can inspect whether a command is a built‑in with type:

Scenario 5: Logging sudo activity

Administrators can record every command executed via sudo, enhancing security and aiding troubleshooting. Basic logging requires configuring /etc/sudoers (or a file in /etc/sudoers.d) to specify a log file and format.

References

sudo manual

7 Linux sudo Command Tips and Tricks

sudo 日志配置