
Our sudoers does not have secure_path, which upstream images do have. This means that folks who are testing things on our nodes are getting different behavior than they do in the wild. Change-Id: Icda40f074386d3595104ac2a38e266115b266e1c
27 lines
627 B
Plaintext
27 lines
627 B
Plaintext
# /etc/sudoers
|
|
#
|
|
# This file MUST be edited with the 'visudo' command as root.
|
|
#
|
|
# See the man page for details on how to write a sudoers file.
|
|
#
|
|
|
|
Defaults env_reset
|
|
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
|
|
|
# Host alias specification
|
|
|
|
# User alias specification
|
|
|
|
# Cmnd alias specification
|
|
|
|
# User privilege specification
|
|
root ALL=(ALL) ALL
|
|
|
|
# Allow members of group sudo to execute any command after they have
|
|
# provided their password
|
|
# (Note that later entries override this, so you might need to move
|
|
# it further down)
|
|
%sudo ALL=(ALL) NOPASSWD: ALL
|
|
#
|
|
#includedir /etc/sudoers.d
|