From eda60e8c17753e4ae97398155703b962e1c70ee0 Mon Sep 17 00:00:00 2001 From: Bdale Garbee Date: Wed, 15 Jul 2009 01:29:58 -0600 Subject: [PATCH] enable %sudo example in default sudoers file --- debian/changelog | 7 +++++-- debian/sudo-ldap.postinst | 4 ++-- debian/sudo.postinst | 4 ++-- 3 files changed, 9 insertions(+), 6 deletions(-) diff --git a/debian/changelog b/debian/changelog index 9259385..cb08100 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,12 @@ sudo (1.7.2-1) unstable; urgency=low * new upstream version, closes: #537103 - * improve initial sudoers commented-out example, closes: #536220 + * improve initial sudoers by having the exemption for users in group + sudo on by default, and including the ability to run any command as + any user. This makes the default install roughly equivalent to our + old use of the --with-exempt=sudo build option, closes: #536220, #536222 - -- Bdale Garbee Wed, 15 Jul 2009 00:52:27 -0600 + -- Bdale Garbee Wed, 15 Jul 2009 01:29:46 -0600 sudo (1.7.0-1) unstable; urgency=low diff --git a/debian/sudo-ldap.postinst b/debian/sudo-ldap.postinst index 6271160..e464377 100644 --- a/debian/sudo-ldap.postinst +++ b/debian/sudo-ldap.postinst @@ -20,10 +20,10 @@ if ( ! -f "/etc/sudoers") { "# User alias specification\n\n", "# Cmnd alias specification\n\n", "# User privilege specification\nroot\tALL=(ALL) ALL\n\n", - "# Uncomment to allow members of group sudo to not need a password\n", + "# Allow members of group sudo to not need a password\n", "# (Note that later entries override this, so you might need to move\n", "# it further down)\n", - "# %sudo ALL=(ALL) NOPASSWD: ALL\n"; + "%sudo ALL=(ALL) NOPASSWD: ALL\n"; close SUDOERS; } diff --git a/debian/sudo.postinst b/debian/sudo.postinst index 1494ccd..c1a8b51 100644 --- a/debian/sudo.postinst +++ b/debian/sudo.postinst @@ -20,10 +20,10 @@ if ( ! -f "/etc/sudoers") { "# User alias specification\n\n", "# Cmnd alias specification\n\n", "# User privilege specification\nroot\tALL=(ALL) ALL\n\n", - "# Uncomment to allow members of group sudo to not need a password\n", + "# Allow members of group sudo to not need a password\n", "# (Note that later entries override this, so you might need to move\n", "# it further down)\n", - "# %sudo ALL=(ALL) NOPASSWD: ALL\n"; + "%sudo ALL=(ALL) NOPASSWD: ALL\n"; close SUDOERS; } -- 2.47.2