All right, first we need to use user add Linda to create a user with the name Linda. And
then we need to create a sudo configuration that allows Linda to perform common administrator
tasks, which is user add user mod user del and allow for changing of passwords but not
the password for the user root. Well, vi-sudo is what I want to do here. Of course, you
can also use one of these drop-in files in the etc sudoers.d directory. But here, I like
to follow the example that we see on the line just above my cursor, the %users line. Now
%users means that it goes for people that are a member of the group users. And I'm doing
it for the individual user. And we point to user sbin, user add, as well as user sbin,
user mod, as well as user sbin, user del. Then we also need user bin passwd, but not
user bin passwd root. And then we also need to make sure that the authentication token
is going to be valid for one hour. That's a global setting. So what you need is default
timestamp underscore type is global. And timestamp underscore timeout is 60. And there
we go. Now we want to test this as user Linda. So let me use su minus Linda. And user Linda
is going to use sudo user add bob. And that, oh, doesn't seem to be working. And you know why?
Well, we never got a user password for user Linda. So I need to get out of here. And I need to get
back to my root shell and use passwd for user Linda. Because when the user wants to use sudo
privileges, the user needs to enter the password. So now I'm getting back to my Linda shell and
sudo user add bob. And this time, at least, I can enter the password. And there we go. And that was
successful. Now sudo passwd on bob to verify that password in general is working. And that is
working. And now I'm trying to do it for use for root. And there we can see that this is not
allowed. And that is exactly what we needed in this exercise.