> 
> **Possible Duplicate:**  
> 
> [What specific vulnerabilities am I creating by disabling the sudo password?](https://unix.stackexchange.com/questions/4390/what-specific-vulnerabilities-am-i-creating-by-disabling-the-sudo-password) 
> 
> 
> 

I'm involved yet again in the old argument on whether `sudo` without password is secure enough or not. I'm on the side of those who doesn't mind typing a password every time I use `sudo`, even if it's less convenient, because it means that not just any script that runs on the server can include `sudo install-rootkit` without me knowing it.

I also use it through multi-shell commands like `gsh` and `terminator` to send identical commands to multiple remote servers (CentOS 5).

The argument from the other side is that it's redundant and just inhibits him from using his favourite multi-shell command.

Google'ing about "sudo best practices" I didn't find much discussion about this, it seems that people are generally OK with password-less `sudo`.

Am I in the minority?

Would PCI-DSS compliance make a difference? (we aren't PCI-complient yet, but it's in the cards).