[sudo-users] Defaults:user

Victor Engle victor.engle at gmail.com
Fri Feb 3 05:18:11 MST 2017


Thanks Todd. I agree on the user aliases. I'm just trying to cover all the
bases in parsing a file I may not have created.

Vic

On Thu, Feb 2, 2017 at 5:59 PM Todd C. Miller <Todd.Miller at courtesan.com>
wrote:

> On Thu, 02 Feb 2017 18:36:43 +0000, Victor Engle wrote:
>
> > I read the man page but I'm a little confused about the format for
> > Defaults:user. In particular, I want to be able to parse the line, pull
> out
> > the users and validate them, then reconstruct the line minus invalid
> users.
> >
> > If a list of users is specified how are the users in the list delimited
> and
> > how is the user list delimited from the parameter at the end of the
> entry?
>
> The list is delimited so you can do things like:
>
> Defaults:bob,alice,joe  !authenticate
>
> But it is probably easier to read/maintain if you use a User_Alias,
> e.g.
>
> User_Alias FULLTIMERS = bob, alice, joe
> Defaults:FULLTIMERS     !authenticate
>
>  - todd
>


More information about the sudo-users mailing list