Changeset 193bdf3

Timestamp:

11/08/2021 06:23:55 PM (3 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

11.1, 11.2, 11.3, 12.0, 12.1, 12.2, gimp3, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/for-12.3, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/spidermonkey128, xry111/test-20220226, xry111/xf86-video-removal

Children:

f713df3

Parents:

70ea525d

Message:

Expand sudo configuration comments

File:

• postlfs/security/sudo.xml (modified) (1 diff)

postlfs/security/sudo.xml

@@ -216 +216 @@
       </para>
 
-<screen role="root"><userinput>cat &gt; /etc/sudoers.d/sudo &lt;&lt; "EOF"
+<screen role="root"><userinput>cat &gt; /etc/sudoers.d/00-sudo &lt;&lt; "EOF"
 <literal>Defaults secure_path="/usr/sbin:/usr/bin"
 %wheel ALL=(ALL) ALL</literal>
 EOF</userinput></screen>
+
+      <note>
+        <para>
+          In very simple installations where there is only one user, it
+          may be easier to just edit the <filename>/etc/sudoers</filename>
+          file directly.  In that case, the <varname>secure_path</varname>
+          entry may not be needed and using <command>sudo -E ...</command> can
+          import the non-privileged user's full environment into the 
+          privileged session.
+        </para>
+        
+        <para>
+          The files in the <filename class="directory">/etc/sudoers.d</filename> 
+          directory are parsed in sorted lexical order. Be careful that entries 
+          in an added file do not overwrite previous entries.
+        </para>
+      </note>
 
       <para>