| # |
| # Format: |
| # |
| # var_name |
| # TYPE |
| # description (or NULL) |
| # array of struct def_values if TYPE == T_TUPLE |
| # |
| # NOTE: for tuples that can be used in a boolean context the first |
| # value corresponds to boolean FALSE and the second to TRUE. |
| # |
| |
| syslog |
| T_LOGFAC|T_BOOL |
| "Syslog facility if syslog is being used for logging: %s" |
| syslog_goodpri |
| T_LOGPRI |
| "Syslog priority to use when user authenticates successfully: %s" |
| syslog_badpri |
| T_LOGPRI |
| "Syslog priority to use when user authenticates unsuccessfully: %s" |
| long_otp_prompt |
| T_FLAG |
| "Put OTP prompt on its own line" |
| ignore_dot |
| T_FLAG |
| "Ignore '.' in $PATH" |
| mail_always |
| T_FLAG |
| "Always send mail when sudo is run" |
| mail_badpass |
| T_FLAG |
| "Send mail if user authentication fails" |
| mail_no_user |
| T_FLAG |
| "Send mail if the user is not in sudoers" |
| mail_no_host |
| T_FLAG |
| "Send mail if the user is not in sudoers for this host" |
| mail_no_perms |
| T_FLAG |
| "Send mail if the user is not allowed to run a command" |
| tty_tickets |
| T_FLAG |
| "Use a separate timestamp for each user/tty combo" |
| lecture |
| T_TUPLE|T_BOOL |
| "Lecture user the first time they run sudo" |
| never once always |
| lecture_file |
| T_STR|T_PATH|T_BOOL |
| "File containing the sudo lecture: %s" |
| authenticate |
| T_FLAG |
| "Require users to authenticate by default" |
| root_sudo |
| T_FLAG |
| "Root may run sudo" |
| log_host |
| T_FLAG |
| "Log the hostname in the (non-syslog) log file" |
| log_year |
| T_FLAG |
| "Log the year in the (non-syslog) log file" |
| shell_noargs |
| T_FLAG |
| "If sudo is invoked with no arguments, start a shell" |
| set_home |
| T_FLAG |
| "Set $HOME to the target user when starting a shell with -s" |
| always_set_home |
| T_FLAG |
| "Always set $HOME to the target user's home directory" |
| path_info |
| T_FLAG |
| "Allow some information gathering to give useful error messages" |
| fqdn |
| T_FLAG |
| "Require fully-qualified hostnames in the sudoers file" |
| insults |
| T_FLAG |
| "Insult the user when they enter an incorrect password" |
| requiretty |
| T_FLAG |
| "Only allow the user to run sudo if they have a tty" |
| env_editor |
| T_FLAG |
| "Visudo will honor the EDITOR environment variable" |
| rootpw |
| T_FLAG |
| "Prompt for root's password, not the users's" |
| runaspw |
| T_FLAG |
| "Prompt for the runas_default user's password, not the users's" |
| targetpw |
| T_FLAG |
| "Prompt for the target user's password, not the users's" |
| use_loginclass |
| T_FLAG |
| "Apply defaults in the target user's login class if there is one" |
| set_logname |
| T_FLAG |
| "Set the LOGNAME and USER environment variables" |
| stay_setuid |
| T_FLAG |
| "Only set the effective uid to the target user, not the real uid" |
| preserve_groups |
| T_FLAG |
| "Don't initialize the group vector to that of the target user" |
| loglinelen |
| T_UINT|T_BOOL |
| "Length at which to wrap log file lines (0 for no wrap): %d" |
| timestamp_timeout |
| T_FLOAT|T_BOOL |
| "Authentication timestamp timeout: %.1f minutes" |
| passwd_timeout |
| T_FLOAT|T_BOOL |
| "Password prompt timeout: %.1f minutes" |
| passwd_tries |
| T_UINT |
| "Number of tries to enter a password: %d" |
| umask |
| T_MODE|T_BOOL |
| "Umask to use or 0777 to use user's: 0%o" |
| logfile |
| T_STR|T_BOOL|T_PATH |
| "Path to log file: %s" |
| mailerpath |
| T_STR|T_BOOL|T_PATH |
| "Path to mail program: %s" |
| mailerflags |
| T_STR|T_BOOL |
| "Flags for mail program: %s" |
| mailto |
| T_STR|T_BOOL |
| "Address to send mail to: %s" |
| mailfrom |
| T_STR|T_BOOL |
| "Address to send mail from: %s" |
| mailsub |
| T_STR |
| "Subject line for mail messages: %s" |
| badpass_message |
| T_STR |
| "Incorrect password message: %s" |
| timestampdir |
| T_STR|T_PATH |
| "Path to authentication timestamp dir: %s" |
| timestampowner |
| T_STR |
| "Owner of the authentication timestamp dir: %s" |
| exempt_group |
| T_STR|T_BOOL |
| "Users in this group are exempt from password and PATH requirements: %s" |
| passprompt |
| T_STR |
| "Default password prompt: %s" |
| passprompt_override |
| T_FLAG |
| "If set, passprompt will override system prompt in all cases." |
| runas_default |
| T_STR |
| "Default user to run commands as: %s" |
| secure_path |
| T_STR|T_BOOL |
| "Value to override user's $PATH with: %s" |
| editor |
| T_STR|T_PATH |
| "Path to the editor for use by visudo: %s" |
| listpw |
| T_TUPLE|T_BOOL |
| "When to require a password for 'list' pseudocommand: %s" |
| never any all always |
| verifypw |
| T_TUPLE|T_BOOL |
| "When to require a password for 'verify' pseudocommand: %s" |
| never all any always |
| noexec |
| T_FLAG |
| "Preload the dummy exec functions contained in 'noexec_file'" |
| noexec_file |
| T_STR|T_PATH |
| "File containing dummy exec functions: %s" |
| ignore_local_sudoers |
| T_FLAG |
| "If LDAP directory is up, do we ignore local sudoers file" |
| closefrom |
| T_INT |
| "File descriptors >= %d will be closed before executing a command" |
| closefrom_override |
| T_FLAG |
| "If set, users may override the value of `closefrom' with the -C option" |
| setenv |
| T_FLAG |
| "Allow users to set arbitrary environment variables" |
| env_reset |
| T_FLAG |
| "Reset the environment to a default set of variables" |
| env_check |
| T_LIST|T_BOOL |
| "Environment variables to check for sanity:" |
| env_delete |
| T_LIST|T_BOOL |
| "Environment variables to remove:" |
| env_keep |
| T_LIST|T_BOOL |
| "Environment variables to preserve:" |
| role |
| T_STR |
| "SELinux role to use in the new security context: %s" |
| type |
| T_STR |
| "SELinux type to use in the new security context: %s" |
| askpass |
| T_STR|T_PATH|T_BOOL |
| "Path to the askpass helper program: %s" |
| env_file |
| T_STR|T_PATH|T_BOOL |
| "Path to the sudo-specific environment file: %s" |
| sudoers_locale |
| T_STR |
| "Locale to use while parsing sudoers: %s" |
| visiblepw |
| T_FLAG |
| "Allow sudo to prompt for a password even if it would be visisble" |
| pwfeedback |
| T_FLAG |
| "Provide visual feedback at the password prompt when there is user input" |
| fast_glob |
| T_FLAG |
| "Use faster globbing that is less accurate but does not access the filesystem" |
| umask_override |
| T_FLAG |
| "The umask specified in sudoers will override the user's, even if it is more permissive" |
| log_input |
| T_FLAG |
| "Log user's input for the command being run" |
| log_output |
| T_FLAG |
| "Log the output of the command being run" |
| compress_io |
| T_FLAG |
| "Compress I/O logs using zlib" |
| use_pty |
| T_FLAG |
| "Always run commands in a pseudo-tty" |
