version 1.1.1.1, 2012/02/21 16:23:02
|
version 1.1.1.3, 2013/07/22 10:46:11
|
Line 2
|
Line 2
|
# Sample /etc/sudo.conf file |
# Sample /etc/sudo.conf file |
# |
# |
# Format: |
# Format: |
# Plugin plugin_name plugin_path | # Plugin plugin_name plugin_path plugin_options ... |
# Path askpass /path/to/askpass |
# Path askpass /path/to/askpass |
# Path noexec /path/to/noexec.so | # Path noexec /path/to/sudo_noexec.so |
| # Debug sudo /var/log/sudo_debug all@warn |
| # Set disable_coredump true |
# |
# |
# Sudo plugins: |
# Sudo plugins: |
# |
# |
# The plugin_path is relative to ${prefix}/libexec unless fully qualified. |
# The plugin_path is relative to ${prefix}/libexec unless fully qualified. |
# The plugin_name corresponds to a global symbol in the plugin |
# The plugin_name corresponds to a global symbol in the plugin |
# that contains the plugin interface structure. |
# that contains the plugin interface structure. |
|
# The plugin_options are optional. |
# |
# |
# The sudoers plugin is used by default if no Plugin lines are present. |
# The sudoers plugin is used by default if no Plugin lines are present. |
Plugin sudoers_policy sudoers.so |
Plugin sudoers_policy sudoers.so |
Line 21 Plugin sudoers_io sudoers.so
|
Line 24 Plugin sudoers_io sudoers.so
|
# |
# |
# An askpass helper program may be specified to provide a graphical |
# An askpass helper program may be specified to provide a graphical |
# password prompt for "sudo -A" support. Sudo does not ship with its |
# password prompt for "sudo -A" support. Sudo does not ship with its |
# own passpass program but can use the OpenSSH askpass. | # own askpass program but can use the OpenSSH askpass. |
# |
# |
# Use the OpenSSH askpass |
# Use the OpenSSH askpass |
#Path askpass /usr/X11R6/bin/ssh-askpass |
#Path askpass /usr/X11R6/bin/ssh-askpass |
Line 40 Plugin sudoers_io sudoers.so
|
Line 43 Plugin sudoers_io sudoers.so
|
# if you rename or move the sudo_noexec.so file. |
# if you rename or move the sudo_noexec.so file. |
# |
# |
#Path noexec /usr/libexec/sudo_noexec.so |
#Path noexec /usr/libexec/sudo_noexec.so |
|
|
|
# |
|
# Core dumps: |
|
# |
|
# By default, sudo disables core dumps while it is executing (they |
|
# are re-enabled for the command that is run). |
|
# To aid in debugging sudo problems, you may wish to enable core |
|
# dumps by setting "disable_coredump" to false. |
|
# |
|
#Set disable_coredump false |
|
|
|
# |
|
# User groups: |
|
# |
|
# Sudo passes the user's group list to the policy plugin. |
|
# If the user is a member of the maximum number of groups (usually 16), |
|
# sudo will query the group database directly to be sure to include |
|
# the full list of groups. |
|
# |
|
# On some systems, this can be expensive so the behavior is configurable. |
|
# The "group_source" setting has three possible values: |
|
# static - use the user's list of groups returned by the kernel. |
|
# dynamic - query the group database to find the list of groups. |
|
# adaptive - if user is in less than the maximum number of groups. |
|
# use the kernel list, else query the group database. |
|
# |
|
#Set group_source static |