e33993
#
e33993
# Default /etc/sudo.conf file
e33993
#
e33993
# Format:
e33993
#   Plugin plugin_name plugin_path plugin_options ...
e33993
#   Path askpass /path/to/askpass
e33993
#   Path noexec /path/to/sudo_noexec.so
e33993
#   Debug sudo /var/log/sudo_debug all@warn
e33993
#   Set disable_coredump true
e33993
#
e33993
# Sudo plugins:
e33993
#
e33993
# The plugin_path is relative to ${prefix}/libexec unless fully qualified.
e33993
# The plugin_name corresponds to a global symbol in the plugin
e33993
#   that contains the plugin interface structure.
e33993
# The plugin_options are optional.
e33993
#
e33993
# The sudoers plugin is used by default if no Plugin lines are present.
e33993
Plugin sudoers_policy sudoers.so
e33993
Plugin sudoers_io sudoers.so
e33993
e33993
#
e33993
# Sudo askpass:
e33993
#
e33993
# An askpass helper program may be specified to provide a graphical
e33993
# password prompt for "sudo -A" support.  Sudo does not ship with its
e33993
# own passpass program but can use the OpenSSH askpass.
e33993
#
e33993
# Use the OpenSSH askpass
e33993
#Path askpass /usr/X11R6/bin/ssh-askpass
e33993
#
e33993
# Use the Gnome OpenSSH askpass
e33993
#Path askpass /usr/libexec/openssh/gnome-ssh-askpass
e33993
e33993
#
e33993
# Sudo noexec:
e33993
#
e33993
# Path to a shared library containing dummy versions of the execv(),
e33993
# execve() and fexecve() library functions that just return an error.
e33993
# This is used to implement the "noexec" functionality on systems that
e33993
# support C<LD_PRELOAD> or its equivalent.
e33993
# The compiled-in value is usually sufficient and should only be changed
e33993
# if you rename or move the sudo_noexec.so file.
e33993
#
e33993
#Path noexec /usr/libexec/sudo_noexec.so
e33993
e33993
#
e33993
# Core dumps:
e33993
#
e33993
# By default, sudo disables core dumps while it is executing (they
e33993
# are re-enabled for the command that is run).
e33993
# To aid in debugging sudo problems, you may wish to enable core
e33993
# dumps by setting "disable_coredump" to false.
e33993
#
e33993
# Set to false here so as not to interfere with /proc/sys/fs/suid_dumpable
e33993
#
e33993
Set disable_coredump false