source: src-sh/pc-extractoverlay/ports-overlay/usr/local/etc/sudoers @ 1d6186b

9.2-releasereleng/10.0releng/10.0.1releng/10.0.2
Last change on this file since 1d6186b was 1d6186b, checked in by Kris Moore <kris@…>, 10 months ago

Update sudoers to keep some extra env vars for xdg-open to be happy

  • Property mode set to 100644
File size: 4.1 KB
Line 
1## sudoers file.
2##
3## This file MUST be edited with the 'visudo' command as root.
4## Failure to use 'visudo' may result in syntax or file permission errors
5## that prevent sudo from running.
6##
7## See the sudoers man page for the details on how to write a sudoers file.
8##
9
10##
11## Host alias specification
12##
13## Groups of machines. These may include host names (optionally with wildcards),
14## IP addresses, network numbers or netgroups.
15# Host_Alias    WEBSERVERS = www1, www2, www3
16
17##
18## User alias specification
19##
20## Groups of users.  These may consist of user names, uids, Unix groups,
21## or netgroups.
22# User_Alias    ADMINS = millert, dowdy, mikef
23
24##
25## Cmnd alias specification
26##
27## Groups of commands.  Often used to group related commands together.
28# Cmnd_Alias    PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
29#                           /usr/bin/pkill, /usr/bin/top
30
31##
32## Defaults specification
33##
34## Uncomment if needed to preserve environmental variables related to the
35## FreeBSD pkg_* utilities and fetch.
36# Defaults      env_keep += "PKG_PATH PKG_DBDIR PKG_TMPDIR TMPDIR PACKAGEROOT PACKAGESITE PKGDIR FTP_PASSIVE_MODE"
37##
38## Additionally uncomment if needed to preserve environmental variables
39## related to portupgrade
40# Defaults      env_keep += "PORTSDIR PORTS_INDEX PORTS_DBDIR PACKAGES PKGTOOLS_CONF"
41##
42## You may wish to keep some of the following environment variables
43## when running commands via sudo.
44##
45## Locale settings
46# Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
47##
48## Run X applications through sudo; HOME is used to find the
49## .Xauthority file.  Note that other programs use HOME to find   
50## configuration files and this may lead to privilege escalation!
51Defaults env_keep += "HOME DESKTOP_SESSION KDE_SESSION_UID"
52##
53## ENV to keep so xdg-open works
54Defaults env_keep += "KDE_FULL_SESSION GNOME_DESKTOP_SESSION_ID DESKTOP_SESSION"
55##
56## X11 resource path settings
57Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
58##
59## Desktop path settings
60Defaults env_keep += "QTDIR KDEDIR XCURSOR_THEME"
61##
62## Allow sudo-run commands to inherit the callers' ConsoleKit session
63Defaults env_keep += "XDG_SESSION_COOKIE"
64##
65## Uncomment to enable special input methods.  Care should be taken as
66## this may allow users to subvert the command being run via sudo.
67Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
68##
69## Uncomment to enable logging of a command's output, except for
70## sudoreplay and reboot.  Use sudoreplay to play back logged sessions.
71# Defaults log_output
72# Defaults!/usr/bin/sudoreplay !log_output
73# Defaults!/usr/local/bin/sudoreplay !log_output
74# Defaults!/sbin/reboot !log_output
75
76##
77## Runas alias specification
78##
79
80##
81## User privilege specification
82##
83root ALL=(ALL) ALL
84
85## Uncomment to allow members of group wheel to execute any command
86%wheel ALL=(ALL) ALL
87
88## Same thing without a password
89# %wheel ALL=(ALL) NOPASSWD: ALL
90
91## Uncomment to allow members of group sudo to execute any command
92# %sudo ALL=(ALL) ALL
93
94## Uncomment to allow any user to run sudo if they know the password
95## of the user they are running the command as (root by default).
96# Defaults targetpw  # Ask for the password of the target user
97# ALL ALL=(ALL) ALL  # WARNING: only use this together with 'Defaults targetpw'
98
99## Read drop-in files from /usr/local/etc/sudoers.d
100## (the '#' here does not indicate a comment)
101#includedir /usr/local/etc/sudoers.d
102
103# Enable PC-BSD networking functionality for users in wheel
104%wheel ALL = NOPASSWD: /usr/local/bin/pc-ethernetconfig
105%wheel ALL = NOPASSWD: /usr/local/bin/pc-netmanager
106%wheel ALL = NOPASSWD: /usr/local/bin/pc-nettray
107%wheel ALL = NOPASSWD: /usr/local/bin/pc-wificonfig
108%wheel ALL = NOPASSWD: /usr/local/bin/pc-updategui
109%wheel ALL = NOPASSWD: /usr/local/bin/pc-fbsdupdatecheck
110%wheel ALL = NOPASSWD: /usr/local/bin/life-preserver
111%wheel ALL = NOPASSWD: /usr/local/etc/amount/amount
112%wheel ALL = NOPASSWD: /usr/local/bin/pc-bluetoothtray
113%wheel ALL = NOPASSWD: /usr/local/bin/pc-mounttray
114%wheel ALL = NOPASSWD: /usr/local/bin/pc-soundconfig
115%wheel ALL = NOPASSWD: /usr/local/bin/pc-updatemanager
116%wheel ALL = NOPASSWD: /usr/local/bin/pc-pkgmanager
Note: See TracBrowser for help on using the repository browser.