Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am in sudo group all right:

$ id
uid=1002(molot) gid=1002(molot) groups=1002(molot),27(sudo),33(www-data)

In my sudores I seem to have appropriate setting:


and it is the last uncommented line there.

But when I try to git pull, I'm asped to retype my password:

$ sudo -u www-data git --git-dir /var/www/.git --work-tree /var/www pull "origin" master
[sudo] password for molot:

It is not a problem when I am logged in console, but it is unacceptable in scripts. So how can I allow anyone in sudo group to git pull as www-data without retyping password?

When I put my name directly:


it works for me. But, obviously, not for marian or other users from sudo group. As far as I understood manual, both usernames and group names should work in first file.

share|improve this question
Can you not sudo -u www-data ./ What is the purpose of the script? – jimbobmcgee Apr 23 '14 at 12:15
@jimbobmcgee it's a git hook, so no, I cannot prepend anything to it. It is called by the user who pushed git changes and I found no real way around it. – Mołot Apr 23 '14 at 12:18
The first field (if my quick understanding of the sudoers file format is correct) is the username of the invoking user. Have you tried replacing it with the wildcard *, or whichever user the git hook runs as? – Michael Kjörling Apr 23 '14 at 12:34
@MichaelKjörling as stated here it should be possible to write both users and groups in first field. * does not work. Putting my name directly works for me... but not for other users in sudo group, obviously. – Mołot Apr 23 '14 at 12:42
@MichaelKjörling thank you, your comment made me to look for special chars and allowed me to find an answer :D Edit: deleted self answer and accepted 3rd party answer from the same moment. – Mołot Apr 23 '14 at 12:45
up vote 19 down vote accepted

Seems you've got the relevant line in your sudoers missing a character:


matches an user named 'sudo'. For 'all users in the sudo group' it should be:


(note the % sign at the beginning).

share|improve this answer
Ah so that's what the % in %wheel meant. – nikhil Apr 24 '14 at 19:30

sudo visudo

Then, assuming molot is your username, go to the end of file and:


This should work, but if it doesn't, keep us posted.

share|improve this answer
This works. For me. But, obviously, not for marian or any other user in sudo group. – Mołot Apr 23 '14 at 12:16
Then create user aliases (User_Alias), and give permission to run specific commands as root (Runas_Alias). I don't know how your group is set-up, you can check out the Sudoers wiki It is really concise. Check the "User Specifications" section, this should help. – Jugurtha Hadjar Apr 23 '14 at 12:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.