sudo...

README.md

@@ -67,3 +67,8 @@ Allow sshd to listen on the non-default TCP port 4242:
 ```bash
 semanage port --add -t ssh_port_t -p tcp 4242
 ```
+
+### sudo
+
+Add the provided [sudoers policy file](rootfs/etc/sudoers.d/Born2beroot) in
+`/etc/sudoers.d`.

rootfs/etc/sudoers.d/Born2beroot

@@ -3,5 +3,6 @@ Defaults iolog_dir = /var/log/sudo/io/%{user}
 Defaults iolog_file = %{runas_user}-%{command}-XXXXXX
 Defaults logfile=/var/log/sudo/sudo.log
 Defaults badpass_message = Nope...
+#Defaults secure_path = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
 %sudo ALL=(ALL) ALL