There's two similar groups in ubuntu: admin and adm, I found that /var/log/apache2 is in the adm group, and default sudoers includes admin group.

What's difference between the two?


The adm group is only good for viewing all the log files in /var/log (which historically used to be called /var/adm). It has no relation to sudo or root.

| improve this answer | |
  • So if I wasn't part of adm, and I could sudo, would I be able to view the logs? Or must I be part of adm? – CMCDragonkai Jul 9 '14 at 8:07
  • @CMCDragonkai the root user can generally do anything, so you still should be able to access /var/log. – Adrian Petrescu Jul 9 '14 at 11:31
  • I mean as in, the user is not root, but part of the wheel group and can sudo – CMCDragonkai Jul 10 '14 at 1:11
  • @CMCDragonkai Sudo lets you become root, so yes. If root can do it, then so can someone with sudo access. – flarn2006 May 30 '19 at 14:46

Admin is just wrong, it's probably there as an example. Adm is a historical artifact. You can see if either group exists on your system and if there are files/directories owned by them. There may also be PAM (limits.conf) rules.

They are nothing magical. They are just normal groups that may or may not be used in some config or filesystem permission.

You can have a look at Securing Debian Manual for explanations to some of the names. If Ubuntu has a matching one, you might want that instead.

| improve this answer | |
  • The admin group is valid on Ubuntu versions <=11.10 (and sometimes 12.04 - see my answer below for more info) and used for allowing sudo access. – user12345 May 20 '14 at 18:32

The admin group is used to grant sudo access on ubuntu 11.10 and earlier.

You may also see it on 12.04 for backwards compatibility if you upgraded. If you did a fresh install you will probably not see it.

<= 11.10 use group admin

>= 12.04 use group sudo

Up until Ubuntu 11.10, administrator access using the sudo tool was granted via the "admin" Unix group. In Ubuntu 12.04, administrator access will be granted via the "sudo" group. This makes Ubuntu more consistent with the upstream implementation and Debian. For compatibility purposes, the "admin" group will continue to provide sudo/administrator access in 12.04. [1]

As was mentioned above, adm is related to log access:

adm: Group adm is used for system monitoring tasks. Members of this group can read many log files in /var/log, and can use xconsole. Historically, /var/log was /usr/adm (and later /var/adm), thus the name of the group. [2]

[1] https://wiki.ubuntu.com/PrecisePangolin/ReleaseNotes/UbuntuDesktop#PrecisePangolin.2BAC8-ReleaseNotes.2BAC8-CommonInfrastructure.Common_Infrastructure

[2] https://www.debian.org/doc/manuals/securing-debian-howto/ch12.en.html

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.