hsv2/42_Born2beroot-CentOS
1
0
Fork 0
Code Issues Pull requests Projects Releases Activity

sudoers conf

Browse source
This commit is contained in:
Andrea Blankenstijn 2022-06-04 13:17:43 +00:00
parent d873cbcc21
commit 1b16c79148
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -67,3 +67,8 @@ Allow sshd to listen on the non-default TCP port 4242:
```bash
semanage port --add -t ssh_port_t -p tcp 4242
```
### sudo
Add the provided [sudoers policy file](rootfs/etc/sudoers.d/Born2beroot) in
`/etc/sudoers.d`.

7
rootfs/etc/sudoers.d/Born2beroot Normal file
View file

@ -0,0 +1,7 @@
Defaults log_input, log_output, requiretty
Defaults iolog_dir = /var/log/sudo/io/%{user}
Defaults iolog_file = %{runas_user}-%{command}-XXXXXX
Defaults logfile=/var/log/sudo/sudo.log
Defaults badpass_message = Nope...
%sudo ALL=(ALL) ALL