Safeguard for Sudo 7.2.3 - Administration Guide

Always set $HOME to the target user's home directory.

Require users to authenticate by default.

Authentication failure message.

Incorrect password message.

Ignore case when matching group names.

Ignore case when matching user names.

File descriptors starting at this value will be closed when running a command.

If set, the user may use sudo's -C option.

Time in seconds after which the command will be terminated.

A colon-separated list of editor path names used by sudoedit and visudo.

Environment variables to check for safety.

Environment variables to remove.

Visudo will honor the SUDO_EDITOR, VISUAL and EDITOR EDITOR environment variables.

Path to the sudo-specific environment file.

Environment variables to preserve.

Reset the environment to a default set of variables.

Start the command as a background process.

Users in this group are exempt from password and PATH requirements.

Require fully-qualified hostnames in the sudoers file.

Plugin for non-Unix group support.

Allow commands to be run even if sudo cannot write to the audit log.

Ignore '.' in the PATH environment variable.

Allow commands to be run even if sudo cannot write to the I/O log.

Ignore unknown Defaults entries in sudoers instead of producing a warning.

Insult the user when they enter an incorrect password.

Intercept further commands and apply sudoers restrictions to them.

Allow an intercepted command to run set setuid or setgid programs.

Subsequent commands in an intercepted session must be authenticated.

The mechanism used by the intercept and log_subcmds options: dso or ptrace.

Whether to verify the command and arguments after execution.

Directory in which to store input/output logs.

File in which to store the input/output log.

Lecture user the first time they run sudo: never, once, always.

File containing the sudo lecture.

When to require a password for 'list' pseudocommand: never, any, all, always.

Log when a command is allowed by sudoers.

Log when a command is denied by sudoers.

Log the exit status of commands.

The format of logs to produce: sudo or json.

Log the hostname in the (non-syslog) log file.

Log user's input for the command being run.

Log the output of the command being run.

Store plaintext passwords in I/O log input.

Log sub-commands run by the original command.

Log the year in the (non-syslog) log file.

Path to log file.

Length at which to wrap log file lines (0 for no wrap).

Send mail if the user tries to run a command.

Always send mail when sudo is run.

Send mail if user authentication fails.

Send mail if the user is not in sudoers for this host.

Send mail if the user is not allowed to run a command.

Send mail if the user is not in sudoers.

Flags for mail program.

Path to mail program.

Address to send mail from.

Subject line for mail messages.

Address to send mail to.

Resolve groups in sudoers and match on the group ID, not the name.

Match netgroups based on the entire tuple: user, host and domain.

Preload the sudo_noexec library which replaces the exec functions.

Default password prompt.

List of regular expressions to use when matching a password prompt.

Password prompt timeout.

Number of tries to enter a password.

Allow some information gathering to give useful error messages.

Don't initialize the group vector to that of the target user.

Only allow the user to run sudo if they have a tty.

Path to the restricted sudo-specific environment file.

The maximum size to which the process's address space may grow (in bytes).

The largest size core dump file that may be created (in bytes).

The maximum amount of CPU time that the process may use (in seconds).

The maximum size of the data segment for the process (in bytes).

The largest size file that the process may create (in bytes).

The maximum number of locks that the process may establish.

The maximum size that the process may lock in memory (in bytes).

The maximum number of files that the process may have open.

The maximum number of processes that the user may run simultaneously.

The maximum size to which the process's resident set size may grow (in bytes).

The maximum size to which the process's stack may grow (in bytes).

Root may run sudo.

Prompt for root's password, not the users's.

Allow the use of unknown runas user and/or group ID.

Only permit running commands as a user with a valid shell.

Default user to run commands as.

Prompt for the runas_default user's password, not the users's.

Root directory to change to before executing the command.

Working directory to change to before executing the command.

Override the user's PATH environment variable.

Set HOME to the target user when starting a shell with -s.

Set the LOGNAME and USER environment variables.

Add an entry to the utmp/utmpx file when allocating a pty.

Allow users to set arbitrary environment variables.

If sudo is invoked with no arguments, start a shell.

Check parent directories for writability when editing files with sudoedit.

Follow symbolic links when editing files with sudoedit.

Locale to use while parsing sudoers.

Syslog facility if syslog is being used for logging.

Syslog priority to use when user authenticates unsuccessfully.

Syslog priority to use when user authenticates successfully.

Log entries larger than this value will be split into multiple syslog messages.

Include the process ID when logging via syslog.

Prompt for the target user's password, not the users's.

Authentication timestamp timeout.

Use a separate timestamp for each user/tty combo.

Umask to use or 0777 to use user's.

The umask specified in sudoers will override the user's, even if it is more permissive.

Enable sudoers netgroup support.

Allow the user to specify a timeout on the command line.

Set the user in utmp to the runas user, not the invoking user.