Re: default /etc/sudoers in Linux distributions

On Sat, Jan 31, 2026 at 02:05:29PM -0700, Todd C. Miller wrote:
>However, there is another sudoers file, plugins/sudoers/sudoers.in
>that gets installed as part of "make install" after substitutions
>are performed.  I think that one could be used as a starting point.

This is what I am currently suggesting as debian's new default sudoers 
file:
https://salsa.debian.org/sudo-team/sudo/-/blob/wip/sudoers/debian/etc/sudoers?ref_type=heads

I have also filed PR against sudo upstream, 
https://github.com/sudo-project/sudo/pull/516 suggesting some changes to 
the file in plugins/sudoers/sudoers.in and examples/sudoers.in which 
suggests some changes that have worked well on the Debian sidei, 
aim to make both files look more alike (so that it is easier for 
local-admins to "cherry-pick" from the example) and introduce the 
include sudoers.d also in the examples file.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers