Visudo and Default_Entry lines

bluesclues227 · 04-19-2016, 10:50 PM

Hi I'm need some help regarding Visudo configuration, I'm not sure where the Default_Entry lines go? Is it specific on the type of Default_Entry? i.e. Defaults (not sure what this Default_Type stands for?) Defaults@ (Host_List),Defaults: (User_List),Defaults! (Cmnd_List),Defaults>(Runas_List)

Mitt Green · 04-20-2016, 12:58 PM

/etc/sudoers varies from distro to distro; Debian provides this

Code:

Defaults        env_reset
Defaults        mail_badpass
Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

From examples:

Quote:

Defaults syslog=auth
Defaults>root !set_logname
Defaults:FULLTIMERS !lecture
Defaults:millert !authenticate
Defaults@SERVERS log_year, logfile=/var/log/sudo.log
Defaults!PAGERS noexec

bluesclues227 · 04-21-2016, 12:45 AM

I am using a Debain based distro, so my layout looks similar.. So are you saying any Default_ Entries I wish to apply go straight under those default Default_Entries lines that are already there? Does order matter? Also what if I want to over-ride the Default_Entries lines, where would that go? Does any know where I can find comprehensive detailed explanation of this? I understand the details just not the order placement in the file where all Default_Entries go...

Mitt Green · 04-21-2016, 09:01 AM

I'm pretty sure, that man sudoers will answer all of your questions.