AnsibleRoles/ensure_sudo
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add sudo_intercept.so comments from latest sudo package

Browse Source
This commit is contained in:
Jason Rothstein 2022-10-03 00:03:08 -05:00
parent 2423792139
commit 8de48b63e3
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
templates/Fedora/36/etc/sudo.conf
View File

@ -38,6 +38,21 @@
# #
#Path devsearch /dev/pts:/dev/vt:/dev/term:/dev/zcons:/dev/pty:/dev #Path devsearch /dev/pts:/dev/vt:/dev/term:/dev/zcons:/dev/pty:/dev
#
# Sudo command interception:
# Path intercept /path/to/sudo_intercept.so
#
# Path to a shared library containing replacements for the execv(),
# execve() and fexecve() library functions that perform a policy check
# to verify the command is allowed and simply return an error if not.
# This is used to implement the "intercept" functionality on systems that
# support LD_PRELOAD or its equivalent.
#
# The compiled-in value is usually sufficient and should only be changed
# if you rename or move the sudo_intercept.so file.
#
#Path intercept /usr/libexec/sudo/sudo_intercept.so
# #
# Sudo noexec: # Sudo noexec:
# Path noexec /path/to/sudo_noexec.so # Path noexec /path/to/sudo_noexec.so