You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

97 lines
3.0 KiB

  1. ## sudoers file.
  2. ##
  3. ## This file MUST be edited with the 'visudo' command as root.
  4. ## Failure to use 'visudo' may result in syntax or file permission errors
  5. ## that prevent sudo from running.
  6. ##
  7. ## See the sudoers man page for the details on how to write a sudoers file.
  8. ##
  9. ##
  10. ## Host alias specification
  11. ##
  12. ## Groups of machines. These may include host names (optionally with wildcards),
  13. ## IP addresses, network numbers or netgroups.
  14. # Host_Alias WEBSERVERS = www1, www2, www3
  15. ##
  16. ## User alias specification
  17. ##
  18. ## Groups of users. These may consist of user names, uids, Unix groups,
  19. ## or netgroups.
  20. # User_Alias ADMINS = millert, dowdy, mikef
  21. ##
  22. ## Cmnd alias specification
  23. ##
  24. ## Groups of commands. Often used to group related commands together.
  25. # Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
  26. # /usr/bin/pkill, /usr/bin/top
  27. ##
  28. ## Defaults specification
  29. ##
  30. ## You may wish to keep some of the following environment variables
  31. ## when running commands via sudo.
  32. ##
  33. ## Locale settings
  34. # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
  35. ##
  36. ## Run X applications through sudo; HOME is used to find the
  37. ## .Xauthority file. Note that other programs use HOME to find
  38. ## configuration files and this may lead to privilege escalation!
  39. # Defaults env_keep += "HOME"
  40. ##
  41. ## X11 resource path settings
  42. # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
  43. ##
  44. ## Desktop path settings
  45. # Defaults env_keep += "QTDIR KDEDIR"
  46. ##
  47. ## Allow sudo-run commands to inherit the callers' ConsoleKit session
  48. # Defaults env_keep += "XDG_SESSION_COOKIE"
  49. ##
  50. ## Uncomment to enable special input methods. Care should be taken as
  51. ## this may allow users to subvert the command being run via sudo.
  52. # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
  53. ##
  54. ## Uncomment to enable logging of a command's output, except for
  55. ## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
  56. # Defaults log_output
  57. # Defaults!/usr/bin/sudoreplay !log_output
  58. # Defaults!/usr/local/bin/sudoreplay !log_output
  59. # Defaults!/sbin/reboot !log_output
  60. ##
  61. ## Runas alias specification
  62. ##
  63. ##
  64. ## User privilege specification
  65. ##
  66. root ALL=(ALL) ALL
  67. ## Uncomment to allow members of group wheel to execute any command
  68. # %wheel ALL=(ALL) ALL
  69. ## Same thing without a password
  70. # %wheel ALL=(ALL) NOPASSWD: ALL
  71. ## Uncomment to allow members of group sudo to execute any command
  72. %sudo ALL=(ALL) ALL
  73. ## Uncomment to allow any user to run sudo if they know the password
  74. ## of the user they are running the command as (root by default).
  75. # Defaults targetpw # Ask for the password of the target user
  76. # ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw'
  77. ## Read drop-in files from /etc/sudoers.d
  78. ## (the '#' here does not indicate a comment)
  79. #includedir /etc/sudoers.d
  80. # Users in the truecrypt group are allowed to run TrueCrypt as root.
  81. #%truecrypt ALL=(root) NOPASSWD:/usr/bin/truecrypt
  82. jule ALL=(ALL) NOPASSWD:/bin/mount
  83. jule ALL=(ALL) NOPASSWD:/bin/umount