| Server IP : 85.214.239.14 / Your IP : 3.147.51.72 Web Server : Apache/2.4.62 (Debian) System : Linux h2886529.stratoserver.net 4.9.0 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.18 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : OFF | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /proc/2/root/proc/self/root/proc/2/cwd/proc/2/root/proc/2/root/usr/share/doc/sudo/ |
Upload File : |
The version of sudo that ships with Debian by default resets the
environment, as described by the "env_reset" flag in the sudoers file.
This implies that all environment variables are removed, except for
LOGNAME, PATH, SHELL, TERM, DISPLAY, XAUTHORITY, XAUTHORIZATION, XAPPLRESDIR,
XFILESEARCHPATH, XUSERFILESEARCHPATH, LANG, LANGUAGE, LC_*, and USER.
In case you want sudo to preserve more environment variables, you must
specify the env_keep variable in the sudoers file. You should edit the
sudoers file using the visudo tool.
Examples:
Preserve the default variables plus the EDITOR variable:
Defaults env_keep+="EDITOR"
Preserve the default variables plus all variables starting with LC_:
Defaults env_keep+="LC_*"
- - - - -
If you're using the sudo-ldap package, note that it is now configured to
look for /etc/sudo-ldap.conf. Depending on your system configuration, it
probably makes sense for this to be a symlink to /etc/ldap.conf, or perhaps
to /etc/libnss-ldap.conf or /etc/pam_ldap.conf. By default, no symlink or
file is provided, you'll need to decide what to do and create a suitable
file before sudo-ldap will work.
- - - - -
As of version 1.7, sudo-ldap now requires the LDAP source to be specified
in /etc/nsswitch.conf with a line like:
sudoers: ldap
- - - - -
Note that the support for the sss provider (libsss_sudo.so) that allows sudo
to use SSSD as a cache for policies stored in LDAP is included in the sudo
package, not in the sudo-ldap package. I have some hope that this turns out
to be a better overall solution for using sudo with LDAP, as the sudo-ldap
package is difficult to maintain and I'd love to be able to eliminate it!
- - - - -
See the file OPTIONS in this directory for more information on the sudo
build options used in building the Debian package.
- - - - -
If you're having trouble grasping the fundamental idea of what sudo is all
about, here's a succinct and humorous take on it...
http://www.xkcd.com/c149.html