33 lines
1.4 KiB
Plaintext
33 lines
1.4 KiB
Plaintext
# sudoers file.
|
|
#
|
|
# This file MUST be edited with the 'visudo' command as root.
|
|
#
|
|
# See the sudoers man page for the details on how to write a sudoers file.
|
|
#
|
|
|
|
# Prevent environment variables from influencing programs in an
|
|
# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
|
|
Defaults always_set_home
|
|
Defaults env_reset
|
|
|
|
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS"
|
|
Defaults env_keep += "MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE"
|
|
Defaults env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES"
|
|
Defaults env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
|
|
Defaults env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY"
|
|
#Defaults env_keep += "XDG_SESSION_COOKIE"
|
|
|
|
# Comment out the preceding line and uncomment the following one if you need
|
|
# to use special input methods. This may allow users to compromise the root
|
|
# account if they are allowed to run commands without authentication.
|
|
#Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
|
|
|
|
# User privilege specification
|
|
root ALL=(ALL) ALL
|
|
|
|
# Uncomment to allow people in group wheel to run all commands
|
|
%wheel ALL=(ALL) ALL
|
|
|
|
# Same thing without a password
|
|
#%wheel ALL=(ALL) NOPASSWD: ALL
|