1## sudoers file.
2##
3## This file MUST be edited with the 'visudo' command as root.
4## Failure to use 'visudo' may result in syntax or file permission errors
5## that prevent sudo from running.
6##
7## See the sudoers man page for the details on how to write a sudoers file.
8##
9
10##
11## Host alias specification
12##
13## Groups of machines. These may include host names (optionally with wildcards),
14## IP addresses, network numbers or netgroups.
15# Host_Alias	WEBSERVERS = www1, www2, www3
16
17##
18## User alias specification
19##
20## Groups of users.  These may consist of user names, uids, Unix groups,
21## or netgroups.
22# User_Alias	ADMINS = millert, dowdy, mikef
23
24##
25## Cmnd alias specification
26##
27## Groups of commands.  Often used to group related commands together.
28# Cmnd_Alias	PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
29# 			    /usr/bin/pkill, /usr/bin/top
30
31##
32## Defaults specification
33##
34## You may wish to keep some of the following environment variables
35## when running commands via sudo.
36##
37## Locale settings
38# Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
39##
40## Run X applications through sudo; HOME is used to find the
41## .Xauthority file.  Note that other programs use HOME to find   
42## configuration files and this may lead to privilege escalation!
43# Defaults env_keep += "HOME"
44##
45## X11 resource path settings
46# Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
47##
48## Desktop path settings
49# Defaults env_keep += "QTDIR KDEDIR"
50##
51## Allow sudo-run commands to inherit the callers' ConsoleKit session
52# Defaults env_keep += "XDG_SESSION_COOKIE"
53##
54## Uncomment to enable special input methods.  Care should be taken as
55## this may allow users to subvert the command being run via sudo.
56# Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
57##
58## Uncomment to enable logging of a command's output, except for
59## sudoreplay and reboot.  Use sudoreplay to play back logged sessions.
60# Defaults log_output
61# Defaults!/usr/bin/sudoreplay !log_output
62# Defaults!/usr/local/bin/sudoreplay !log_output
63# Defaults!/sbin/reboot !log_output
64
65##
66## Runas alias specification
67##
68
69##
70## User privilege specification
71##
72root ALL=(ALL) ALL
73
74## Uncomment to allow members of group wheel to execute any command
75# %wheel ALL=(ALL) ALL
76
77## Same thing without a password
78# %wheel ALL=(ALL) NOPASSWD: ALL
79
80## Uncomment to allow members of group sudo to execute any command
81# %sudo	ALL=(ALL) ALL
82
83## Uncomment to allow any user to run sudo if they know the password
84## of the user they are running the command as (root by default).
85# Defaults targetpw  # Ask for the password of the target user
86# ALL ALL=(ALL) ALL  # WARNING: only use this together with 'Defaults targetpw'
87
88## Read drop-in files from @sysconfdir@/sudoers.d
89## (the '#' here does not indicate a comment)
90#includedir @sysconfdir@/sudoers.d
91