Return
-
Title
Why are we seeing mode 0440, should be 0400 on sudo files? -
Description
Running a "sudo -l" shows:
sudo -l
/etc/sudoers.d/File is mode 0440, should be 0400sudoers files are usually 440.
-
Cause
In the pm.settings ( /etc/opt/quest/qpm4u/pm.settings) there is a configuration called "sudoersMode" which is set to 0400 by default.
This error can be seen on client systems even if they do not have anything in their local sudoers.d directory. The file needs to be corrected on the PM servers in that case.
-
Resolution
In pm.settings ( /etc/opt/quest/qpm4u/pm.settings) there is a configuration called "sudoersMode" which is set to 0400 by default.Set this to 0440 to resolve the issue.
-
Additional Information
The pm.settings file is not propagated from the servers so you will need to make the change on all the systems, clients and servers, where it is required.