X-Git-Url: https://git.gag.com/?a=blobdiff_plain;f=debian%2FREADME.Debian;h=e1ecb3e4a41a0214b285dbf8d3a4b3c6feca8b53;hb=bd90dc482c398e5f138e9502efe50076729f3cd1;hp=8da7c94f88bf0e00589f9fc3cf7b4781ecf54ad2;hpb=d1a119ed0be74c7354c99adb432ccc7de5e44ba7;p=debian%2Fsudo diff --git a/debian/README.Debian b/debian/README.Debian index 8da7c94..e1ecb3e 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -2,8 +2,8 @@ The version of sudo that ships with Debian by default resets the environment, as described by the "env_reset" flag in the sudoers file. This implies that all environment variables are removed, except for -HOME, LOGNAME, PATH, SHELL, TERM, DISPLAY, XAUTHORITY, XAUTHORIZATION, -LANG, LANGUAGE, LC_*, and USER. +LOGNAME, PATH, SHELL, TERM, DISPLAY, XAUTHORITY, XAUTHORIZATION, XAPPLRESDIR, +XFILESEARCHPATH, XUSERFILESEARCHPATH, LANG, LANGUAGE, LC_*, and USER. In case you want sudo to preserve more environment variables, you must specify the env_keep variable in the sudoers file. You should edit the @@ -17,3 +17,32 @@ Preserve the default variables plus the EDITOR variable: Preserve the default variables plus all variables starting with LC_: Defaults env_keep+="LC_*" + + - - - - - + +If you're using the sudo-ldap package, note that it is now configured to +look for /etc/sudo-ldap.conf. Depending on your system configuration, it +probably makes sense for this to be a symlink to /etc/ldap.conf, or perhaps +to /etc/libnss-ldap.conf or /etc/pam_ldap.conf. By default, no symlink or +file is provided, you'll need to decide what to do and create a suitable +file before sudo-ldap will work. + + - - - - - + +As of version 1.7, sudo-ldap now requires the LDAP source to be specified +in /etc/nsswitch.conf with a line like: + + sudoers: ldap + + - - - - - + +See the file OPTIONS in this directory for more information on the sudo +build options used in building the Debian package. + + - - - - - + +If you're having trouble grasping the fundamental idea of what sudo is all +about, here's a succinct and humorous take on it... + + http://www.xkcd.com/c149.html +