A Linux administrator needs to grant a few junior administrators the ability to run commands with root privileges using sudo. To maintain manageability and adhere to a common security practice, the administrator decides to use a dedicated group for this purpose. The junior administrators' user accounts have already been created. Which of the following is the most appropriate and standard set of actions to achieve this on an RHEL-based system?
Add the users to the wheel group and then uncomment the auth required pam_wheel.so line in the /etc/pam.d/su file.
Add the users to the sudo group using usermod and verify the line %sudo ALL=(ALL) ALL is present and uncommented in the /etc/sudoers file.
Add the users to the wheel group using usermod and verify the line %wheel ALL=(ALL) ALL is present and uncommented in the /etc/sudoers file.
Create a new group, add the users to it, and then create a new file in /etc/sudoers.d/ granting that group sudo privileges.
The correct answer is to add the junior administrator users to the wheel group and ensure the /etc/sudoers file has the line %wheel ALL=(ALL) ALL uncommented. The wheel group is the traditional, standard group used on Red Hat-based systems (like RHEL, CentOS, Fedora) to control who can use sudo to gain root privileges. By adding users to this group and uncommenting the corresponding line in /etc/sudoers, those users are granted full sudo access.
The sudo group is more commonly the default on Debian-based systems. While creating a custom group in /etc/sudoers.d/ is a valid method for granting permissions, it is not the standard, pre-configured method involving the wheel group. Configuring pam_wheel.so relates to restricting the su command, not sudo.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the purpose of the 'wheel' group on RHEL-based systems?
Open an interactive chat with Bash
How does the `/etc/sudoers` file control sudo access?
Open an interactive chat with Bash
Why is `visudo` recommended for editing the `/etc/sudoers` file?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access