Re: default /etc/sudoers in Linux distributions

Hi Simon,

thanks for your comments from months ago.

On Mon, Feb 02, 2026 at 01:14:07PM +1030, Simon Lees via sudo-workers wrote:
>Within SUSE and openSUSE Distributions SUSE's security team is 
>responsible for making decisions on what goes into our policy. 
>Currently we start with the file in "plugins/sudoers/sudoers.in" and 
>apply the following patch https://build.opensuse.org/projects/Base:System/packages/sudo/files/sudo-sudoers.patch?expand=1

I see you're setting env_reset explicitly. That's the default.
And always_set_home is "largely obsolete" and has no effect unless 
env_reset has been disabled. Do you have those settings still in your 
configuration on purpose?

Also !insults is now the default.

I like that you have targetpw set as default. We probably cannot change 
that any more, that would cause huge breakage in user configuration. I 
also like that you have your root-equivalent wheel group in a sudoers.d 
snippet.

>We also ship sub packages that allow anyone in the sudoers and or 
>wheel group access to authenticate using there own password.

So the subpackage allowing wheel is installed by default? At least my 
OpenSUSE Leap 16 test install has this by default.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers