diff options
| author | Xiao Pan <xyz@flylightning.xyz> | 2024-09-14 15:42:21 -0700 |
|---|---|---|
| committer | Xiao Pan <xyz@flylightning.xyz> | 2024-09-14 16:25:30 -0700 |
| commit | cb7ff21570ff93715e7f3ca3b31dffa5f58a03a7 (patch) | |
| tree | d97b9d103d382bd5cd68005a2cf0d667cb2b3683 /etc | |
| parent | 92a6fbc00a0d96d902bb64ef5808c6997de32317 (diff) | |
merge pacdiff
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/sudoers | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/etc/sudoers b/etc/sudoers index 2569d3a2..d590be97 100644 --- a/etc/sudoers +++ b/etc/sudoers @@ -74,9 +74,16 @@ Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/bin" ## this may allow users to subvert the command being run via sudo. # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER" ## -## Uncomment to restore the historic behavior where a command is run in -## the user's own terminal. -# Defaults !use_pty +## Uncomment to disable "use_pty" when running commands as root. +## Commands run as non-root users will run in a pseudo-terminal, +## not the user's own terminal, to prevent command injection. +# Defaults>root !use_pty +## +## Uncomment to run commands in the background by default. +## This can be used to prevent sudo from consuming user input while +## a non-interactive command runs if "use_pty" or I/O logging are +## enabled. Some commands may not run properly in the background. +# Defaults exec_background ## ## Uncomment to send mail if the user does not enter the correct password. # Defaults mail_badpass |