Return to sudoers.in CVS log | Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo / plugins / sudoers |
1.1 ! misho 1: ## sudoers file. ! 2: ## ! 3: ## This file MUST be edited with the 'visudo' command as root. ! 4: ## Failure to use 'visudo' may result in syntax or file permission errors ! 5: ## that prevent sudo from running. ! 6: ## ! 7: ## See the sudoers man page for the details on how to write a sudoers file. ! 8: ## ! 9: ! 10: ## ! 11: ## Host alias specification ! 12: ## ! 13: ## Groups of machines. These may include host names (optionally with wildcards), ! 14: ## IP addresses, network numbers or netgroups. ! 15: # Host_Alias WEBSERVERS = www1, www2, www3 ! 16: ! 17: ## ! 18: ## User alias specification ! 19: ## ! 20: ## Groups of users. These may consist of user names, uids, Unix groups, ! 21: ## or netgroups. ! 22: # User_Alias ADMINS = millert, dowdy, mikef ! 23: ! 24: ## ! 25: ## Cmnd alias specification ! 26: ## ! 27: ## Groups of commands. Often used to group related commands together. ! 28: # Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \ ! 29: # /usr/bin/pkill, /usr/bin/top ! 30: ! 31: ## ! 32: ## Defaults specification ! 33: ## ! 34: ## You may wish to keep some of the following environment variables ! 35: ## when running commands via sudo. ! 36: ## ! 37: ## Locale settings ! 38: # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET" ! 39: ## ! 40: ## Run X applications through sudo; HOME is used to find the ! 41: ## .Xauthority file. Note that other programs use HOME to find ! 42: ## configuration files and this may lead to privilege escalation! ! 43: # Defaults env_keep += "HOME" ! 44: ## ! 45: ## X11 resource path settings ! 46: # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH" ! 47: ## ! 48: ## Desktop path settings ! 49: # Defaults env_keep += "QTDIR KDEDIR" ! 50: ## ! 51: ## Allow sudo-run commands to inherit the callers' ConsoleKit session ! 52: # Defaults env_keep += "XDG_SESSION_COOKIE" ! 53: ## ! 54: ## Uncomment to enable special input methods. Care should be taken as ! 55: ## this may allow users to subvert the command being run via sudo. ! 56: # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER" ! 57: ## ! 58: ## Uncomment to enable logging of a command's output, except for ! 59: ## sudoreplay and reboot. Use sudoreplay to play back logged sessions. ! 60: # Defaults log_output ! 61: # Defaults!/usr/bin/sudoreplay !log_output ! 62: # Defaults!/usr/local/bin/sudoreplay !log_output ! 63: # Defaults!/sbin/reboot !log_output ! 64: ! 65: ## ! 66: ## Runas alias specification ! 67: ## ! 68: ! 69: ## ! 70: ## User privilege specification ! 71: ## ! 72: root ALL=(ALL) ALL ! 73: ! 74: ## Uncomment to allow members of group wheel to execute any command ! 75: # %wheel ALL=(ALL) ALL ! 76: ! 77: ## Same thing without a password ! 78: # %wheel ALL=(ALL) NOPASSWD: ALL ! 79: ! 80: ## Uncomment to allow members of group sudo to execute any command ! 81: # %sudo ALL=(ALL) ALL ! 82: ! 83: ## Uncomment to allow any user to run sudo if they know the password ! 84: ## of the user they are running the command as (root by default). ! 85: # Defaults targetpw # Ask for the password of the target user ! 86: # ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw' ! 87: ! 88: ## Read drop-in files from @sysconfdir@/sudoers.d ! 89: ## (the '#' here does not indicate a comment) ! 90: #includedir @sysconfdir@/sudoers.d