1.1 misho 1: Set disable_coredump true 2: Set group_source adaptive 3: Set max_groups -1 4: Plugin sudoers_policy sudoers.so sudoers_file=/etc/sudoers sudoers_mode=0400 sudoers_gid=0 sudoers_uid=0 5: Plugin sudoers_io sudoers.so