sudoers 1.4 KB

123456789101112131415161718192021222324252627282930313233
  1. # sudoers file.
  2. #
  3. # This file MUST be edited with the 'visudo' command as root.
  4. #
  5. # See the sudoers man page for the details on how to write a sudoers file.
  6. #
  7. # Prevent environment variables from influencing programs in an
  8. # unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
  9. Defaults always_set_home
  10. Defaults env_reset
  11. Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS"
  12. Defaults env_keep += "MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE"
  13. Defaults env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES"
  14. Defaults env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
  15. Defaults env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY"
  16. #Defaults env_keep += "XDG_SESSION_COOKIE"
  17. # Comment out the preceding line and uncomment the following one if you need
  18. # to use special input methods. This may allow users to compromise the root
  19. # account if they are allowed to run commands without authentication.
  20. #Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
  21. # User privilege specification
  22. root ALL=(ALL) ALL
  23. # Uncomment to allow people in group wheel to run all commands
  24. %wheel ALL=(ALL) ALL
  25. # Same thing without a password
  26. #%wheel ALL=(ALL) NOPASSWD: ALL