返回 Bug 清单
BUG-0481project-52高已修复deploy-config

Ubuntu cloud-init NOPASSWD two-location injection

发现:2026-10-06验证:2026-10-09置信度:80%

症状

sudo works without password after cloud-init provisioning

根因

Ubuntu cloud-init injects NOPASSWD into both /etc/sudoers and /etc/sudoers.d/90-cloud-init-users, single deletion is insufficient

修复方案

sudo sed -i '/NOPASSWD/d' /etc/sudoers AND /etc/sudoers.d/90-cloud-init-users, then set explicit 'user ALL=(ALL) ALL'

错误签名

NOPASSWD cloud-init sudoers

技术信息

来源项目

project-52

涉及文件

/etc/sudoers, /etc/sudoers.d/90-cloud-init-users

标签

project-52, mcp-reported, source-agent