Annotation of embedaddon/sudo/plugins/sudoers/sudoers.in, revision 1.1.1.1.2.2
1.1 misho 1: ## sudoers file.
2: ##
3: ## This file MUST be edited with the 'visudo' command as root.
4: ## Failure to use 'visudo' may result in syntax or file permission errors
5: ## that prevent sudo from running.
6: ##
7: ## See the sudoers man page for the details on how to write a sudoers file.
8: ##
9:
10: ##
11: ## Host alias specification
12: ##
13: ## Groups of machines. These may include host names (optionally with wildcards),
14: ## IP addresses, network numbers or netgroups.
15: # Host_Alias WEBSERVERS = www1, www2, www3
16:
17: ##
18: ## User alias specification
19: ##
20: ## Groups of users. These may consist of user names, uids, Unix groups,
21: ## or netgroups.
22: # User_Alias ADMINS = millert, dowdy, mikef
23:
24: ##
25: ## Cmnd alias specification
26: ##
27: ## Groups of commands. Often used to group related commands together.
28: # Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
29: # /usr/bin/pkill, /usr/bin/top
30:
31: ##
32: ## Defaults specification
33: ##
34: ## You may wish to keep some of the following environment variables
35: ## when running commands via sudo.
36: ##
37: ## Locale settings
38: # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
39: ##
40: ## Run X applications through sudo; HOME is used to find the
41: ## .Xauthority file. Note that other programs use HOME to find
42: ## configuration files and this may lead to privilege escalation!
43: # Defaults env_keep += "HOME"
44: ##
45: ## X11 resource path settings
46: # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
47: ##
48: ## Desktop path settings
49: # Defaults env_keep += "QTDIR KDEDIR"
50: ##
51: ## Allow sudo-run commands to inherit the callers' ConsoleKit session
52: # Defaults env_keep += "XDG_SESSION_COOKIE"
53: ##
54: ## Uncomment to enable special input methods. Care should be taken as
55: ## this may allow users to subvert the command being run via sudo.
56: # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
57: ##
58: ## Uncomment to enable logging of a command's output, except for
59: ## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
60: # Defaults log_output
61: # Defaults!/usr/bin/sudoreplay !log_output
62: # Defaults!/usr/local/bin/sudoreplay !log_output
63: # Defaults!/sbin/reboot !log_output
64:
65: ##
66: ## Runas alias specification
67: ##
68:
69: ##
70: ## User privilege specification
71: ##
72: root ALL=(ALL) ALL
73:
74: ## Uncomment to allow members of group wheel to execute any command
75: # %wheel ALL=(ALL) ALL
76:
77: ## Same thing without a password
78: # %wheel ALL=(ALL) NOPASSWD: ALL
79:
80: ## Uncomment to allow members of group sudo to execute any command
81: # %sudo ALL=(ALL) ALL
82:
83: ## Uncomment to allow any user to run sudo if they know the password
84: ## of the user they are running the command as (root by default).
85: # Defaults targetpw # Ask for the password of the target user
86: # ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw'
87:
88: ## Read drop-in files from @sysconfdir@/sudoers.d
89: ## (the '#' here does not indicate a comment)
90: #includedir @sysconfdir@/sudoers.d
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>