55 lines
1.7 KiB
Plaintext
55 lines
1.7 KiB
Plaintext
|
#
|
||
|
|
# This file MUST be edited with the 'visudo' command as root.
|
||
|
|
#
|
||
|
|
# Please consider adding local content in /etc/sudoers.d/ instead of
|
||
|
|
# directly modifying this file.
|
||
|
|
#
|
||
|
|
# See the man page for details on how to write a sudoers file.
|
||
|
|
#
|
||
|
|
Defaults env_reset
|
||
|
|
Defaults mail_badpass
|
||
|
|
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
|
||
|
|
Defaults use_pty
|
||
|
|
Defaults !lecture
|
||
|
|
|
||
|
|
# This preserves proxy settings from user environments of root
|
||
|
|
# equivalent users (group sudo)
|
||
|
|
Defaults:%sudo env_keep += "http_proxy https_proxy ftp_proxy all_proxy no_proxy"
|
||
|
|
|
||
|
|
# This allows running arbitrary commands, but so does ALL, and it means
|
||
|
|
# different sudoers have their choice of editor respected.
|
||
|
|
Defaults:%sudo env_keep += "EDITOR"
|
||
|
|
|
||
|
|
# Completely harmless preservation of a user preference.
|
||
|
|
Defaults:%sudo env_keep += "GREP_COLOR"
|
||
|
|
|
||
|
|
# While you shouldn't normally run git as root, you need to with etckeeper
|
||
|
|
#Defaults:%sudo env_keep += "GIT_AUTHOR_* GIT_COMMITTER_*"
|
||
|
|
|
||
|
|
# Per-user preferences; root won't have sensible values for them.
|
||
|
|
#Defaults:%sudo env_keep += "EMAIL DEBEMAIL DEBFULLNAME"
|
||
|
|
|
||
|
|
# "sudo scp" or "sudo rsync" should be able to use your SSH agent.
|
||
|
|
Defaults:%sudo env_keep += "SSH_AGENT_PID SSH_AUTH_SOCK"
|
||
|
|
|
||
|
|
# Ditto for GPG agent
|
||
|
|
#Defaults:%sudo env_keep += "GPG_AGENT_INFO"
|
||
|
|
|
||
|
|
# Host alias specification
|
||
|
|
|
||
|
|
# User alias specification
|
||
|
|
|
||
|
|
# Cmnd alias specification
|
||
|
|
|
||
|
|
# User privilege specification
|
||
|
|
root ALL=(ALL:ALL) ALL
|
||
|
|
|
||
|
|
# Members of the admin group may gain root privileges
|
||
|
|
%admin ALL=(ALL) ALL
|
||
|
|
|
||
|
|
# Allow members of group sudo to execute any command
|
||
|
|
%sudo ALL=(ALL:ALL) NOPASSWD: ALL
|
||
|
|
|
||
|
|
# See sudoers(5) for more information on "@include" directives:
|
||
|
|
|
||
|
|
@includedir /etc/sudoers.d
|