sudoers.suse.erb
No OneTemporary
Actions

Size

3 KB

Subscribers

None

sudoers.suse.erb
View Options

	# file managed by puppet (unless config_file_replace=false)
	#
	## sudoers file.
	##
	## This file MUST be edited with the 'visudo' command as root.
	## Failure to use 'visudo' may result in syntax or file permission errors
	## that prevent sudo from running.
	##
	## See the sudoers man page for the details on how to write a sudoers file.
	##

	##
	## Host alias specification
	##
	## Groups of machines. These may include host names (optionally with wildcards),
	## IP addresses, network numbers or netgroups.
	# Host_Alias WEBSERVERS = www1, www2, www3

	##
	## User alias specification
	##
	## Groups of users. These may consist of user names, uids, Unix groups,
	## or netgroups.
	# User_Alias ADMINS = millert, dowdy, mikef

	##
	## Cmnd alias specification
	##
	## Groups of commands. Often used to group related commands together.
	# Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
	# /usr/bin/pkill, /usr/bin/top

	##
	## Defaults specification
	##
	## Prevent environment variables from influencing programs in an
	## unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
	Defaults always_set_home
	## Path that will be used for every command run from sudo
	Defaults secure_path="/usr/sbin:/usr/bin:/sbin:/bin:/opt/puppetlabs/bin"
	Defaults env_reset
	## Change env_reset to !env_reset in previous line to keep all environment variables
	## Following list will no longer be necessary after this change

	Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE"
	## Comment out the preceding line and uncomment the following one if you need
	## to use special input methods. This may allow users to compromise the root
	## account if they are allowed to run commands without authentication.
	#Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"

	## Do not insult users when they enter an incorrect password.
	Defaults !insults

	##
	## Uncomment to enable logging of a command's output, except for
	## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
	# Defaults log_output
	# Defaults!/usr/bin/sudoreplay !log_output
	# Defaults!/sbin/reboot !log_output

	## In the default (unconfigured) configuration, sudo asks for the root password.
	## This allows use of an ordinary user account for administration of a freshly
	## installed system. When configuring sudo, delete the two
	## following lines:
	#Defaults targetpw # ask for the password of the target user i.e. root
	#ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

	##
	## Runas alias specification
	##

	##
	## User privilege specification
	##
	root ALL=(ALL) ALL

	## Uncomment to allow members of group wheel to execute any command
	# %wheel ALL=(ALL) ALL

	## Same thing without a password
	# %wheel ALL=(ALL) NOPASSWD: ALL

	## Read drop-in files
	## (the '#' here does not indicate a comment)
	#includedir <%= @config_dir %>
	<% @extra_include_dirs.each do \|include_dir\| -%>
	#includedir <%= include_dir %>
	<% end if @extra_include_dirs -%>

File Metadata

Mime Type: text/x-c
Expires: Jun 4 2025, 6:38 PM (14 w, 2 d ago)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 3398683

sudoers.suse.erbNo OneTemporaryActions

sudoers.suse.erbView Options

File Metadata

Event Timeline

sudoers.suse.erb
No OneTemporary
Actions

sudoers.suse.erb
View Options