Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ## Groups of commands. Often used to group related commands together.
- # Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
- # /usr/bin/pkill, /usr/bin/top
- # Cmnd_Alias REBOOT = /sbin/halt, /sbin/reboot, /sbin/poweroff
- ##
- ## Defaults specification
- ##
- ## Prevent environment variables from influencing programs in an
- ## unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
- Defaults always_set_home
- ## Path that will be used for every command run from sudo
- Defaults secure_path="/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin:/usr/local/sbin"
- Defaults env_reset
- ## Change env_reset to !env_reset in previous line to keep all environment variables
- ## Following list will no longer be necessary after this change
- Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREM >
- ## Comment out the preceding line and uncomment the following one if you need
- ## to use special input methods. This may allow users to compromise the root
- ## account if they are allowed to run commands without authentication.
- #Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASURE >
- ## Do not insult users when they enter an incorrect password.
- Defaults !insults
- ## Uncomment to use a hard-coded PATH instead of the user's to find commands
- # Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
- ##
- ## Uncomment to send mail if the user does not enter the correct password.
- # Defaults mail_badpass
- ##
- ## Uncomment to enable logging of a command's output, except for
- ## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
- # Defaults log_output
- # Defaults!/usr/bin/sudoreplay !log_output
- # Defaults!REBOOT !log_output
- ## In the default (unconfigured) configuration, sudo asks for the root password.
- ## This allows use of an ordinary user account for administration of a freshly
- ## installed system. When configuring sudo, delete the two
- ## following lines:
- Defaults targetpw # ask for the password of the target user i.e. root
- ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!
- ##
- ## Runas alias specification
- ##
- ##
- ## User privilege specification
- ##
- root ALL=(ALL) ALL
- joaomns ALL=(ALL) ALL
- ## Uncomment to allow members of group wheel to execute any command
- %wheel ALL=(ALL) ALL
- ## Same thing without a password
- #%wheel ALL=(ALL) NOPASSWD: ALL
- ## Read drop-in files from /etc/sudoers.d
- @includedir /etc/sudoers.d
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement