diff --git a/postlfs/security/sudo.xml b/postlfs/security/sudo.xml index 73b74b15e6..0b4486616b 100644 --- a/postlfs/security/sudo.xml +++ b/postlfs/security/sudo.xml @@ -215,11 +215,28 @@ ln -sfv libsudo_util.so.0.0.0 /usr/lib/sudo/libsudo_util.so.0root user: -cat > /etc/sudoers.d/sudo << "EOF" +cat > /etc/sudoers.d/00-sudo << "EOF" Defaults secure_path="/usr/sbin:/usr/bin" %wheel ALL=(ALL) ALL EOF + + + In very simple installations where there is only one user, it + may be easier to just edit the /etc/sudoers + file directly. In that case, the secure_path + entry may not be needed and using sudo -E ... can + import the non-privileged user's full environment into the + privileged session. + + + + The files in the /etc/sudoers.d + directory are parsed in sorted lexical order. Be careful that entries + in an added file do not overwrite previous entries. + + + For details, see man sudoers.