[sudo-users] Defaults:user

Todd C. Miller Todd.Miller at courtesan.com
Thu Feb 2 15:59:25 MST 2017


On Thu, 02 Feb 2017 18:36:43 +0000, Victor Engle wrote:

> I read the man page but I'm a little confused about the format for
> Defaults:user. In particular, I want to be able to parse the line, pull out
> the users and validate them, then reconstruct the line minus invalid users.
> 
> If a list of users is specified how are the users in the list delimited and
> how is the user list delimited from the parameter at the end of the entry?

The list is delimited so you can do things like:

Defaults:bob,alice,joe	!authenticate

But it is probably easier to read/maintain if you use a User_Alias,
e.g.

User_Alias FULLTIMERS = bob, alice, joe
Defaults:FULLTIMERS	!authenticate

 - todd


More information about the sudo-users mailing list