Return to sample.sudo.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo / doc

1.8.7

    1: #
    2: # Sample /etc/sudo.conf file
    3: #
    4: # Format:
    5: #   Plugin plugin_name plugin_path plugin_options ...
    6: #   Path askpass /path/to/askpass
    7: #   Path noexec /path/to/sudo_noexec.so
    8: #   Debug sudo /var/log/sudo_debug all@warn
    9: #   Set disable_coredump true
   10: #
   11: # Sudo plugins:
   12: #
   13: # The plugin_path is relative to ${prefix}/libexec unless fully qualified.
   14: # The plugin_name corresponds to a global symbol in the plugin
   15: #   that contains the plugin interface structure.
   16: # The plugin_options are optional.
   17: #
   18: # The sudoers plugin is used by default if no Plugin lines are present.
   19: Plugin sudoers_policy sudoers.so
   20: Plugin sudoers_io sudoers.so
   21: 
   22: #
   23: # Sudo askpass:
   24: #
   25: # An askpass helper program may be specified to provide a graphical
   26: # password prompt for "sudo -A" support.  Sudo does not ship with its
   27: # own askpass program but can use the OpenSSH askpass.
   28: #
   29: # Use the OpenSSH askpass
   30: #Path askpass /usr/X11R6/bin/ssh-askpass
   31: #
   32: # Use the Gnome OpenSSH askpass
   33: #Path askpass /usr/libexec/openssh/gnome-ssh-askpass
   34: 
   35: #
   36: # Sudo noexec:
   37: #
   38: # Path to a shared library containing dummy versions of the execv(),
   39: # execve() and fexecve() library functions that just return an error.
   40: # This is used to implement the "noexec" functionality on systems that
   41: # support C<LD_PRELOAD> or its equivalent.
   42: # The compiled-in value is usually sufficient and should only be changed
   43: # if you rename or move the sudo_noexec.so file.
   44: #
   45: #Path noexec /usr/libexec/sudo_noexec.so
   46: 
   47: #
   48: # Core dumps:
   49: #
   50: # By default, sudo disables core dumps while it is executing (they
   51: # are re-enabled for the command that is run).
   52: # To aid in debugging sudo problems, you may wish to enable core
   53: # dumps by setting "disable_coredump" to false.
   54: #
   55: #Set disable_coredump false
   56: 
   57: #
   58: # User groups:
   59: #
   60: # Sudo passes the user's group list to the policy plugin.
   61: # If the user is a member of the maximum number of groups (usually 16),
   62: # sudo will query the group database directly to be sure to include
   63: # the full list of groups.
   64: #
   65: # On some systems, this can be expensive so the behavior is configurable.
   66: # The "group_source" setting has three possible values:
   67: #   static   - use the user's list of groups returned by the kernel.
   68: #   dynamic  - query the group database to find the list of groups.
   69: #   adaptive - if user is in less than the maximum number of groups.
   70: #	       use the kernel list, else query the group database.
   71: #
   72: #Set group_source static