summaryrefslogtreecommitdiff
path: root/factory-default
diff options
context:
space:
mode:
authorBertrand Jacquin <bertrand@jacquin.bzh>2019-09-29 00:20:28 +0100
committerBertrand Jacquin <bertrand@jacquin.bzh>2019-09-29 00:20:28 +0100
commit3a6aa1fa745d945b8dfe3b5d240021279693e6e6 (patch)
treef69a7cd1ebabf4d42d3bf118743c3127ad119418 /factory-default
parentfactory-default/sys-apps/baselayout: set kernel.kptr_restrict=2 (diff)
downloadportage-3a6aa1fa745d945b8dfe3b5d240021279693e6e6.tar.xz
factory-default/app-admin/sudo: add /etc/sudoers
Diffstat (limited to 'factory-default')
-rw-r--r--factory-default/app-admin/sudo/etc/sudoers32
1 files changed, 32 insertions, 0 deletions
diff --git a/factory-default/app-admin/sudo/etc/sudoers b/factory-default/app-admin/sudo/etc/sudoers
new file mode 100644
index 00000000..29072702
--- /dev/null
+++ b/factory-default/app-admin/sudo/etc/sudoers
@@ -0,0 +1,32 @@
+# Insult users when they enter an incorrect password
+Defaults insults
+
+# Send mail to the mailto user on misuse
+Defaults mail_badpass
+Defaults mail_no_host
+Defaults mail_no_perms
+Defaults mail_no_user
+
+# Don't inherit environnement variable
+Defaults env_reset
+
+# Keep some environnement variable for %whell
+Defaults:%wheel env_keep += USE
+Defaults:%wheel env_keep += FEATURES
+Defaults:%wheel env_keep += MAKEOPTS
+
+# Force LOGNAME, USER and USERNAME
+Defaults set_logname
+
+# Users must authenticate on a per-tty basis
+Defaults tty_tickets
+
+# No restriction for user root
+root ALL=(ALL) ALL
+
+# Allow members of group wheel to execute any command
+%wheel ALL=(ALL) NOPASSWD: ALL
+
+## Read drop-in files from /etc/sudoers.d
+## (the '#' here does not indicate a comment)
+#includedir /etc/sudoers.d