The following options were used to configure sudo for Debian GNU/Linux.
+ --with-all-insults
+
+ Include all the insults in the binary, won't be enabled unless turned
+ on in the sudoers file.
+
--with-devel
Force flex and bison runs on each build.
Support for pluggable authentication modules.
- --with-ldap
-
- Support for LDAP authentication, in the sudo-ldap package version only.
-
--with-fqdn
Allow use of fully qualified domain names in the sudoers file.
- --disable-root-mailer
-
- Send mail as the invoking user, not as root.
-
--with-logging=syslog
--with-logfac=authpriv
--with-timeout=15
--with-password-timeout=0
+ --with-passprompt="[sudo] password for %p: "
Allow 15 minutes before a user has to re-type their passord, versus
the sudo usual default of 5. Never time out while waiting for a
- password to be typed, this is a seriously big deal for Debian package
- developers using 'dpkg-buildpackage -rsudo'.
+ password to be typed, this is important to Debian package developers
+ using 'dpkg-buildpackage -rsudo'. Make it clear which password is
+ requested.
- --with-secure-path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:\
- /sbin:/bin:/usr/X11R6/bin"
-
- Give a reasonable default path for commands run as root via sudo.
-
- --with-all-insults
+ --disable-root-mailer
- Include all the insults in the binary, won't be enabled unless turned
- on in the sudoers file.
+ Send mail as the invoking user, not as root.
--with-sendmail=/usr/sbin/sendmail
Use Debian policy to know the location of sendmail instead of trying
to detect it at build time.
- --disable-setresuid
+ --with-timedir=/var/lib/sudo
+ --mandir=/usr/share/man
+ --libexecdir=/usr/lib/sudo
+
+ Comply with Debian policy on suitable paths.
+
+ --with-ldap
+
+ Support for LDAP authentication, in the sudo-ldap package version only.
- Linux 2.2 kernels don't support setresgid.
* include common-session in pam config, closes: #519700, #607199
* move secure_path from configure to default sudoers, closes: #85123, 85917
* improve sudoers self-documentation, closes: #613639
+ * drop --disable-setresuid since modern systems should not run 2.2 kernels
-- Bdale Garbee <bdale@gag.com> Fri, 22 Jul 2011 15:22:40 +0200
--with-timeout=15 \
--with-password-timeout=0 \
--with-passprompt="[sudo] password for %p: " \
- --with-timedir=/var/lib/sudo \
--disable-root-mailer \
- --disable-setresuid \
--with-sendmail=/usr/sbin/sendmail \
+ --with-timedir=/var/lib/sudo \
--mandir=/usr/share/man \
--libexecdir=/usr/lib/sudo