Advertisement
Guest User

/etc/sudoers

a guest
Jun 27th, 2013
223
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.94 KB | None | 0 0
  1. ## sudoers file.
  2. ##
  3. ## This file MUST be edited with the 'visudo' command as root.
  4. ## Failure to use 'visudo' may result in syntax or file permission errors
  5. ## that prevent sudo from running.
  6. ##
  7. ## See the sudoers man page for the details on how to write a sudoers file.
  8. ##
  9.  
  10. ##
  11. ## Host alias specification
  12. ##
  13. ## Groups of machines. These may include host names (optionally with wildcards),
  14. ## IP addresses, network numbers or netgroups.
  15. # Host_Alias WEBSERVERS = www1, www2, www3
  16.  
  17. ##
  18. ## User alias specification
  19. ##
  20. ## Groups of users. These may consist of user names, uids, Unix groups,
  21. ## or netgroups.
  22. # User_Alias ADMINS = millert, dowdy, mikef
  23.  
  24. ##
  25. ## Cmnd alias specification
  26. ##
  27. ## Groups of commands. Often used to group related commands together.
  28. # Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
  29. # /usr/bin/pkill, /usr/bin/top
  30.  
  31. ##
  32. ## Defaults specification
  33. ##
  34. ## You may wish to keep some of the following environment variables
  35. ## when running commands via sudo.
  36. ##
  37. ## Locale settings
  38. # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
  39. ##
  40. ## Run X applications through sudo; HOME is used to find the
  41. ## .Xauthority file. Note that other programs use HOME to find
  42. ## configuration files and this may lead to privilege escalation!
  43. # Defaults env_keep += "HOME"
  44. ##
  45. ## X11 resource path settings
  46. # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
  47. ##
  48. ## Desktop path settings
  49. # Defaults env_keep += "QTDIR KDEDIR"
  50. ##
  51. ## Allow sudo-run commands to inherit the callers' ConsoleKit session
  52. # Defaults env_keep += "XDG_SESSION_COOKIE"
  53. ##
  54. ## Uncomment to enable special input methods. Care should be taken as
  55. ## this may allow users to subvert the command being run via sudo.
  56. # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
  57. ##
  58. ## Uncomment to enable logging of a command's output, except for
  59. ## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
  60. # Defaults log_output
  61. # Defaults!/usr/bin/sudoreplay !log_output
  62. # Defaults!/usr/local/bin/sudoreplay !log_output
  63. # Defaults!/sbin/reboot !log_output
  64.  
  65. ##
  66. ## Runas alias specification
  67. ##
  68.  
  69. ##
  70. ## User privilege specification
  71. ##
  72. root ALL=(ALL) ALL
  73.  
  74. ## Uncomment to allow members of group wheel to execute any command
  75. %wheel ALL=(ALL) ALL
  76.  
  77. ## Same thing without a password
  78. #%wheel ALL=(ALL) NOPASSWD: ALL
  79.  
  80. ## Uncomment to allow members of group sudo to execute any command
  81. # %sudo ALL=(ALL) ALL
  82.  
  83. ## Uncomment to allow any user to run sudo if they know the password
  84. ## of the user they are running the command as (root by default).
  85. # Defaults targetpw # Ask for the password of the target user
  86. # ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw'
  87.  
  88. ## Read drop-in files from /etc/sudoers.d
  89. ## (the '#' here does not indicate a comment)
  90. #includedir /etc/sudoers.d
  91.  
  92. giulio ALL = NOPASSWD: /sbin/halt
  93. giulio ALL = NOPASSWD: /sbin/reboot
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement