How do I enable passwordless sudo for all options for a command?

user_11941142 0
Viewed 75

I'd like to enable passwordless sudo for sudo apt update, and also have passwordless sudo work for the apt update command when I run it with options like sudo apt update -q and sudo apt update -qq.

I have the file /etc/sudoers.d/apt with these contents:

%sudo ALL=(root) NOPASSWD: /usr/bin/apt update

This gives me passwordless sudo for sudo apt update, but passwordless sudo fails when I call the command with an option such as sudo apt update -q.

I know I can account for options by listing out each one in /etc/sudoers.d/apt, but I'd prefer something which will work for all available options without me needing to foresee which ones I might want to use in the future.

sudo apt shell linux
2 Answers
user_195937970

The most robust way that I can see to do this is:

%sudo ALL=(root) NOPASSWD: /usr/bin/apt update, /usr/bin/apt * update, /usr/bin/apt update *

The /usr/bin/apt update makes the basic command sudo apt update passwordless.

The /usr/bin/apt * update makes adding an option first like sudo apt -q update passwordless.

The /usr/bin/apt update * makes adding an option last like sudo apt update -q passwordless.

All of these are needed to handle the different ways the command might be called, and the different possible placements of options in the command.

Credit to Tobias' answer for pointing me in the right direction on this.

user_119411420
Related