/RV XVXDULRV GHO VLVWHPD HV XQR GH ORV DVSHFWRV IXQGDPHQWDOHV GH *18/LQX[ 'HELGR D TXH

*18/LQX[ HV PXOWLXVXDULR OD JHVWLyQ GH HVWRV HQ HO VLVWHPD VH WRUQD VXPDPHQWH LPSRUWDQWH HQ HO
DVSHFWRWDQWRGHODSURSLDJHVWLyQFRPRGHODVHJXULGDGGHOVLVWHPD3RGHPRVLGHQWLILFDUSHUILOHVGH
XVXDULRVHQXQVLVWHPD/LQX[

8VXDULRURRW7DPELpQOODPDGRVXSHUXVXDULRRDGPLQLVWUDGRU(VOD~QLFDFXHQWDGHXVXDULRTXH
WLHQHSULYLOHJLRVVREUHWRGRHOVLVWHPDFRQWDQGRFRQHODFFHVRDWRGRVORVILFKHURV\GLUHFWRULRV
FRQ LQGHSHQGHQFLD GHO SURSLHWDULR R SHUPLVRV $GHPiV SXHGH FRQWURODU OD DGPLQLVWUDFLyQ GH
FXHQWDV GH XVXDULR HMHFXWDU WDUHDV GH PDQWHQLPLHQWR GHWHQHU HO VLVWHPD LQVWDODU VRIWZDUH \
WDUHDVPiVDYDQ]DGDVFRPRUHFRQILJXUDUHO.HUQHOFRPSLODUHLQVWDODUFRQWURODGRUHVHWF

8VXDULRV HVSHFLDOHV 7DPELpQ OODPDGDV FXHQWDV GHO VLVWHPD (VWDV FXHQWDV WLHQHQ SULYLOHJLRV
SDUDHOVHUYLFLRRSURJUDPDDOTXHHVWpQDVRFLDGRVVLHQGRHVWRDVtSDUDDXPHQWDUODVHJXULGDG
GHOVLVWHPD/DPD\RUtDGHHVWDVFXHQWDVQRWLHQHQFRQWUDVHxDGHELGRDTXHQRHVWiQSHQVDGDV
SDUDLQLFLDUVHVLyQFRQHOODV\VXFUHDFLyQRJHVWLyQGHSHQGHQGHOVHUYLFLR$VtHVWDVFXHQWDVVH
FUHDQRGHVWUX\HQGHSHQGLHQGRVLHOSDTXHWHHVWiRQRLQVWDODGRHQHOVLVWHPD8QHMHPSORGH
HVWDVFXHQWDVSXHGHQVHUELQGDHPRQDGPOSV\QFVKXWGRZQPDLORSHUDWRUVTXLGDSDFKH
HWF

8VXDULRVQRUPDOHV(VWDVVRQODVFXHQWDVGHORVXVXDULRVSHUVRQDOHV&DGDXVXDULRGLVSRQHGH
XQGLUHFWRULRGHWUDEDMRTXHVHXELFDJHQHUDOPHQWHHQKRPH(VWDVFXHQWDVGHXVXDULRWLHQHQ
WRGRV ORV SULYLOHJLRV VROR HQ VX HVSDFLR GH WUDEDMR SRU WDQWR SXHGHQ SHUVRQDOL]DU VX HQWRUQR
PRGLILFDQGRILFKHURVUHODFLRQDGRVFRQHOLQLFLRGHVHVLyQ

/LQX[ WLHQH XQ VLVWHPD GH LGHQWLILFDFLyQ GH XVXDULRV OODPDGR 8,' DVt WDPELpQ SDUD ORV JUXSRV GHO
VLVWHPDOODPDGR*,'(OXVXDULRURRWVLHPSUHWLHQHHO8,'FHURODJHVWLyQGHFXHQWDVGHOVLVWHPDVXHOH
WHQHU XQD UHVHUYD GH LGHQWLILFDFLRQHV TXH YDQ GHO  DO  \ ILQDOPHQWH ORV XVXDULRV QRUPDOHV TXH
VXHOHQ FRPHQ]DU D SDUWLU GHO  HQ DGHODQWH 7RGRV HVWRV YDORUHV VH SXHGHQ PRGLILFDU HQ HO
ILFKHUR/etc/login.defs

7RGRVORVXVXDULRVDOPDFHQDQODGHILQLFLyQGHVXVFXHQWDVHQHOILFKHUR/etc/passwd(VWHILFKHURWLHQH
XQ IRUPDWR FRQFUHWR GLYLGLGR HQ  FDPSRV VHSDUDGRV SRU HO FDUiFWHU GRV SXQWRV  (VWRV FDPSRV
GHWHUPLQDQHOQRPEUHGHOXVXDULRODFRQWUDVHxDHO8,'GHOXVXDULRHO*,'GHOXVXDULRFRPHQWDULRVHO
GLUHFWRULRGHWUDEDMR\ODVKHOOTXHXWLOL]D

/D FRQWUDVHxD GHO XVXDULR \D GH IRUPD SUHGHWHUPLQDGD VH HQFXHQWUD GH IRUPD HQFULSWDGD HQ HO
ILFKHUR /etc/shadow (Q HVWH ILFKHUR DGHPiV GH HVWR VH HQFXHQWUD RWUR WLSR GH LQIRUPDFLyQ
UHODFLRQDGD FRQ OD DGPLQLVWUDFLyQ DYDQ]DGD GH XVXDULRV FDGXFLGDG GH OD FXHQWD FDPELRV GH
FRQWUDVHxDHWF

3DUDFDPELDUGHXVXDULRODIRUPDJHQHUDOHVFRQHOFRPDQGRVX(VWDDSOLFDFLyQWDPELpQQRVSHUPLWH
ODHMHFXFLyQGHFRPDQGRVFRQXQXVXDULRGLIHUHQWHDOQXHVWUR6LHVFULELPRVVRODPHQWHHOFRPDQGRVX
FDPELDUHPRVGHIRUPDDXWRPiWLFDDOXVXDULRURRW

#suusuario2
Enterpassword:
(O XVR GHO JXLyQ LQWHUPHGLR HQ HO FRPDQGR DQWHULRU HV LPSRUWDQWH FRPR HOHPHQWR GH VHJXULGDG /D
XWLOL]DFLyQ GH VX  SHUPLWH DO QXHYR XVXDULR R FRPDQGR HMHFXWDGR WRPDU VXV YDULDEOHV GH HQWRUQR
GHELGRDTXHODRSFLyQGHJXLyQFUHDXQDQXHYDVKHOOSDUDHOXVXDULR3DUDODHMHFXFLyQGHFRPDQGRV
FRPR RWURV XVXDULRV H[LVWH RWUD KHUUDPLHQWD TXH VH KD FRQYHUWLGR HQ XQ HVWiQGDU GH DGPLQLVWUDFLyQ
OODPDGDVXGR

/D PD\RUtD GH GLVWULEXFLRQHV GH HVFULWRULR FRPR HO FDVR GH 8EXQWX VH EDVD HQ XQ HVWiQGDU GH
DGPLQLVWUDFLyQTXHLQGLFDTXHHOVLVWHPDGHEHWHQHUXVXDULRVQRUPDOHVORJXHDGRVHQVXXVRKDELWXDO\
SDUD WDUHDV SXQWXDOHV GH DGPLQLVWUDFLyQ XVDU DO XVXDULR URRW (O XVR GHO FRPDQGR VX WLHQH XQD
GHVYHQWDMD R SUREOHPD GH VHJXULGDG GHELGR D TXH SDUD HMHFXWDU XQ FRPDQGR GH DGPLQLVWUDFLyQ VH
GHEHHVFULELUODFODYHGHURRWHQODWHUPLQDO\DSOLFDFLRQHVFRPRORVNH\ORJJHUVSXHGHQREWHQHUOD(O
FRPDQGRVXGRIXHFUHDGRSUHFLVDPHQWHSDUDHYLWDUHVWDVLWXDFLyQ\DTXHODDSOLFDFLyQSHUPLWHHOHYDU
ORVSHUPLVRVGHOXVXDULRDURRWHVWDEOHFLHQGRODFODYHGHOSURSLRXVXDULRSDUDWDUHDVFRQFUHWDV

6XGR WLHQH XQ ILFKHUR GH DGPLQLVWUDFLyQ \ XQRV FRPDQGRV SDUD VX JHVWLyQ (O
ILFKHUR /etc/sudoers WLHQH LQIRUPDFLyQ GH ORV XVXDULRV SHUPLWLGRV SRU OD DSOLFDFLyQ DGHPiV GH TXH
FRPDQGRFRQFUHWRSXHGHQHMHFXWDU

8QHMHPSORGHOILFKHURHVHOVLJXLHQWH

#ThisfileMUSTbeeditedwiththe'visudo'commandasroot.
#
#Pleaseconsideraddinglocalcontentin/etc/sudoers.d/insteadof
#directlymodifyingthisfile.
#
#Seethemanpagefordetailsonhowtowriteasudoersfile.
#
Defaultsenv_reset
Defaultssecure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

#Hostaliasspecification

#Useraliasspecification

#Cmndaliasspecification

#Userprivilegespecification
rootALL=(ALL:ALL)ALL

#Membersoftheadmingroupmaygainrootprivileges
%adminALL=(ALL)ALL

#Allowmembersofgroupsudotoexecuteanycommand
%sudoALL=(ALL:ALL)ALL

#Seesudoers(5)formoreinformationon"#include"directives:

#includedir/etc/sudoers.d

(VWHILFKHURVyORSXHGHVHUHGLWDGRFRPRURRWFRQHOFRPDQGRYLVXGR3DUDXWLOL]DUHOFRPDQGRVXGR
ODVLQWD[LVHVVLPLODUDVX

#sudousuario2