# Defaults specification# Prevent environment variables from influencing programs in an# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)Defaults always_set_homeDefaults env_resetDefaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE"# Comment out the preceding line and uncomment the following one if you need# to use special input methods. This may allow users to compromise the root# account if they are allowed to run commands without authentication.#Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"# In the default (unconfigured) configuration, sudo asks for the root password.# This allows use of an ordinary user account for administration of a freshly# installed system. When configuring sudo, delete the two# following lines:Defaults targetpw # ask for the password of the target user i.e. rootALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!# Runas alias specification# User privilege specificationroot ALL=(ALL) SETENV: ALL# Uncomment to allow people in group wheel to run all commands# and set environment variables. %wheel ALL=(ALL) SETENV: ALL# Same thing without a password# %wheel ALL=(ALL) NOPASSWD: SETENV: ALL# Samples# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom# %users localhost=/sbin/shutdown -h now