more quiltification

[debian/sudo] / sample.sudoers

diff --git a/sample.sudoers b/sample.sudoers
index 16431345176154b57e5602bc375eb35f387a9c76..cc35506d3673f453418c15ae9b65ad18015b6686 100644 (file)
--- a/sample.sudoers
+++ b/sample.sudoers
@@ -5,6 +5,17 @@
 #
 # See the sudoers man page for the details on how to write a sudoers file.
 #
+# $Sudo: sample.sudoers,v 1.29 2008/10/03 19:55:57 millert Exp $
+
+##
+# Override built-in defaults
+##
+Defaults               syslog=auth
+Defaults>root          !set_logname
+Defaults:FULLTIMERS    !lecture
+Defaults:millert       !authenticate
+Defaults@SERVERS       log_year, logfile=/var/log/sudo.log
+Defaults!PAGERS                noexec
 
 ##
 # User alias specification
@@ -35,7 +46,7 @@ Host_Alias    CDROM = orion, perseus, hercules
 # Cmnd alias specification
 ##
 Cmnd_Alias     DUMPS = /usr/sbin/dump, /usr/sbin/rdump, /usr/sbin/restore, \
-                       /usr/sbin/rrestore, /usr/bin/mt
+                       /usr/sbin/rrestore, /bin/mt
 Cmnd_Alias     KILL = /bin/kill
 Cmnd_Alias     PRINTING = /usr/sbin/lpc, /usr/bin/lprm
 Cmnd_Alias     SHUTDOWN = /usr/sbin/shutdown
@@ -47,15 +58,7 @@ Cmnd_Alias   SHELLS = /sbin/sh, /usr/bin/sh, /usr/bin/csh, /usr/bin/ksh, \
 Cmnd_Alias     SU = /usr/bin/su
 Cmnd_Alias     VIPW = /usr/sbin/vipw, /usr/bin/passwd, /usr/bin/chsh, \
                       /usr/bin/chfn
-
-##
-# Override built-in defaults
-##
-Defaults               syslog=auth
-Defaults>root          !set_logname
-Defaults:FULLTIMERS    !lecture
-Defaults:millert       !authenticate
-Defaults@SERVERS       log_year, logfile=/var/log/sudo.log
+Cmnd_Alias     PAGERS = /usr/bin/more, /usr/bin/pg, /usr/bin/less
 
 ##
 # User specification
@@ -82,10 +85,10 @@ operator    ALL = DUMPS, KILL, SHUTDOWN, HALT, REBOOT, PRINTING,\
                sudoedit /etc/printcap, /usr/oper/bin/
 
 # joe may su only to operator
-joe            ALL = /usr/bin/su operator
+joe            ALL = /bin/su operator
 
 # pete may change passwords for anyone but root on the hp snakes
-pete           HPPA = /usr/bin/passwd [A-z]*, !/usr/bin/passwd root
+pete           HPPA = /usr/bin/passwd [A-Za-z]*, !/usr/bin/passwd root
 
 # bob may run anything on the sparc and sgi machines as any user
 # listed in the Runas_Alias "OP" (ie: root and operator)
@@ -96,13 +99,13 @@ jim         +biglab = ALL
 
 # users in the secretaries netgroup need to help manage the printers
 # as well as add and remove users
-+secretaries   ALL = PRINTING, /usr/bin/adduser, /usr/bin/rmuser
++secretaries   ALL = PRINTING, /usr/sbin/adduser, /usr/bin/rmuser
 
 # fred can run commands as oracle or sybase without a password
 fred           ALL = (DB) NOPASSWD: ALL
 
 # on the alphas, john may su to anyone but root and flags are not allowed
-john           ALPHA = /usr/bin/su [!-]*, !/usr/bin/su *root*
+john           ALPHA = /bin/su [!-]*, !/bin/su *root*
 
 # jen can run anything on all machines except the ones
 # in the "SERVERS" Host_Alias