Annotation of embedaddon/sudo/plugins/sudoers/sudoers.in, revision 1.1

1.1     ! misho       1: ## sudoers file.
        !             2: ##
        !             3: ## This file MUST be edited with the 'visudo' command as root.
        !             4: ## Failure to use 'visudo' may result in syntax or file permission errors
        !             5: ## that prevent sudo from running.
        !             6: ##
        !             7: ## See the sudoers man page for the details on how to write a sudoers file.
        !             8: ##
        !             9: 
        !            10: ##
        !            11: ## Host alias specification
        !            12: ##
        !            13: ## Groups of machines. These may include host names (optionally with wildcards),
        !            14: ## IP addresses, network numbers or netgroups.
        !            15: # Host_Alias   WEBSERVERS = www1, www2, www3
        !            16: 
        !            17: ##
        !            18: ## User alias specification
        !            19: ##
        !            20: ## Groups of users.  These may consist of user names, uids, Unix groups,
        !            21: ## or netgroups.
        !            22: # User_Alias   ADMINS = millert, dowdy, mikef
        !            23: 
        !            24: ##
        !            25: ## Cmnd alias specification
        !            26: ##
        !            27: ## Groups of commands.  Often used to group related commands together.
        !            28: # Cmnd_Alias   PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
        !            29: #                          /usr/bin/pkill, /usr/bin/top
        !            30: 
        !            31: ##
        !            32: ## Defaults specification
        !            33: ##
        !            34: ## You may wish to keep some of the following environment variables
        !            35: ## when running commands via sudo.
        !            36: ##
        !            37: ## Locale settings
        !            38: # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
        !            39: ##
        !            40: ## Run X applications through sudo; HOME is used to find the
        !            41: ## .Xauthority file.  Note that other programs use HOME to find   
        !            42: ## configuration files and this may lead to privilege escalation!
        !            43: # Defaults env_keep += "HOME"
        !            44: ##
        !            45: ## X11 resource path settings
        !            46: # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
        !            47: ##
        !            48: ## Desktop path settings
        !            49: # Defaults env_keep += "QTDIR KDEDIR"
        !            50: ##
        !            51: ## Allow sudo-run commands to inherit the callers' ConsoleKit session
        !            52: # Defaults env_keep += "XDG_SESSION_COOKIE"
        !            53: ##
        !            54: ## Uncomment to enable special input methods.  Care should be taken as
        !            55: ## this may allow users to subvert the command being run via sudo.
        !            56: # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
        !            57: ##
        !            58: ## Uncomment to enable logging of a command's output, except for
        !            59: ## sudoreplay and reboot.  Use sudoreplay to play back logged sessions.
        !            60: # Defaults log_output
        !            61: # Defaults!/usr/bin/sudoreplay !log_output
        !            62: # Defaults!/usr/local/bin/sudoreplay !log_output
        !            63: # Defaults!/sbin/reboot !log_output
        !            64: 
        !            65: ##
        !            66: ## Runas alias specification
        !            67: ##
        !            68: 
        !            69: ##
        !            70: ## User privilege specification
        !            71: ##
        !            72: root ALL=(ALL) ALL
        !            73: 
        !            74: ## Uncomment to allow members of group wheel to execute any command
        !            75: # %wheel ALL=(ALL) ALL
        !            76: 
        !            77: ## Same thing without a password
        !            78: # %wheel ALL=(ALL) NOPASSWD: ALL
        !            79: 
        !            80: ## Uncomment to allow members of group sudo to execute any command
        !            81: # %sudo        ALL=(ALL) ALL
        !            82: 
        !            83: ## Uncomment to allow any user to run sudo if they know the password
        !            84: ## of the user they are running the command as (root by default).
        !            85: # Defaults targetpw  # Ask for the password of the target user
        !            86: # ALL ALL=(ALL) ALL  # WARNING: only use this together with 'Defaults targetpw'
        !            87: 
        !            88: ## Read drop-in files from @sysconfdir@/sudoers.d
        !            89: ## (the '#' here does not indicate a comment)
        !            90: #includedir @sysconfdir@/sudoers.d

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>