Attachment 157751 Details for Bug 297569

etc_sudoers - the new /etc/sudoers

etc_sudoers (text/plain), 1.87 KB, created by Tim Fechtner on 2007-08-15 17:51:18 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tim Fechtner

Created: 2007-08-15 17:51:18 UTC

Size: 1.87 KB

patch

obsolete

># sudoers file.
>#
># This file MUST be edited with the 'visudo' command as root.
>#
># See the sudoers man page for the details on how to write a sudoers file.
>#
>
># Host alias specification
>
># User alias specification
>
># Cmnd alias specification
>
># Defaults specification
>
># Prevent environment variables from influencing programs in an
># unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
>Defaults always_set_home
>Defaults env_reset
>
>Defaults env_keep = "XDG_SESSION_COOKIE LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS"
># Comment out the preceding line and uncomment the following one if you need
># to use special input methods. This may allow users to compromise  the root
># account if they are allowed to run commands without authentication.
>#Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
>
># In the default (unconfigured) configuration, sudo asks for the root password.
># This allows use of an ordinary user account for administration of a freshly
># installed system. When configuring sudo, delete the two
># following lines:
>Defaults targetpw   # ask for the password of the target user i.e. root
>ALL ALL=(ALL) ALL   # WARNING! Only use this together with 'Defaults targetpw'!
>
># Runas alias specification
>
># User privilege specification
>root	ALL=(ALL) SETENV: ALL
>
># Uncomment to allow people in group wheel to run all commands
># and set environment variables.
># %wheel	ALL=(ALL) SETENV: ALL
>
># Same thing without a password
># %wheel	ALL=(ALL) NOPASSWD: SETENV: ALL
>
># Samples
># %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
># %users  localhost=/sbin/shutdown -h now

Actions: View

Attachments on bug 297569: 155601 | 155602 | 155603 | 155674 | 155676 | 156599 | 156607 | 156608 | 156690 | 157751 | 161359 | 193482 | 194094