tmpfs.tech · all tracks · Security & TLS

Grant scoped passwordless sudo

Security & TLS · pro · live throwaway Linux box · 3 tiered hints

Create a system user 'deployer' and grant it passwordless sudo to run ONLY /usr/bin/systemctl restart nginx (nothing else), via a /etc/sudoers.d drop-in that passes `visudo -c`.

▶ Start this challenge

Fastest verified solves

• Luke821s · ✦ no hints

How it works

Press start and you get your own real, disposable Linux VM — in the browser terminal or over SSH. Work the task on a live system; tmpfs.tech grades your solution automatically against the actual machine state, then throws the box away. No install, free to try as a guest.

More Security & TLS challenges

Certificates, signatures, hardening sshd and verifying trust.

• Cap a User's Open Fileseasy · in-browser
• Disconnect Idle SSH Sessionseasy · in-browser
• Generate an RSA keyeasy
• Harden the SSH Clienteasy · in-browser
• Limit Processes Per Usereasy · in-browser
• Lock a key fileeasy
• Lock down a key directoryeasy
• Lock down a private keyeasy

See all Security & TLS challenges →

FAQ

Is it free? Yes — play as a guest, no signup required to start.

Do I need to install anything? No. Everything runs in your browser, or connect over SSH if you prefer your own terminal.

How is it graded? Automatically and deterministically — your work is checked against the real state of the machine you worked on.