From 170bbf7c11e0e553276c66d9660e65225a298f3c Mon Sep 17 00:00:00 2001 From: Bdale Garbee Date: Mon, 31 Aug 2009 14:37:27 -0600 Subject: [PATCH] document the process for existing users to enable /etc/sudoers.d functionality --- debian/README.Debian | 16 ++++++++++++++++ debian/rules | 3 +++ 2 files changed, 19 insertions(+) diff --git a/debian/README.Debian b/debian/README.Debian index ae4212f..c89e431 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -1,3 +1,19 @@ +As of Debian version 1.7.2p1-1, the default /etc/sudoers file created on +installation of the package now includes the directive: + + #includedir /etc/sudoers.d + +This will cause sudo to read and parse any files in the /etc/sudoers.d +directory that do not end in '~' or contain a '.' character. + +Note that because the sudoers file is not a 'conffile' in the Debian sense, +and sudoers contents can very widely, no attempt is made to add this directive +to existing sudoers files on upgrade. Feel free to add the above directive +to the end of your /etc/sudoers file to enable this functionality for existing +installations if you wish! + + - - - - - + The version of sudo that ships with Debian by default resets the environment, as described by the "env_reset" flag in the sudoers file. diff --git a/debian/rules b/debian/rules index 3323153..8d4ea40 100755 --- a/debian/rules +++ b/debian/rules @@ -106,6 +106,9 @@ install: build-stamp install -o root -g root -m 0644 $(CURDIR)/debian/sudo-ldap.lintian \ debian/sudo-ldap/usr/share/lintian/overrides/sudo-ldap + ln -s /usr/share/doc/sudo/README.Debian debian/sudo/etc/sudoers.d + ln -s /usr/share/doc/sudo/README.Debian debian/sudo-ldap/etc/sudoers.d + binary-indep: build install binary-arch: build install -- 2.39.5