-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsudo-comment.conf
64 lines (64 loc) · 1.79 KB
/
sudo-comment.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# This is a config file for sudo-comment.
#
# Tracked commands. Note the spaces at the end; these are not strictly
# necessary but avoid triggering some false positives, like `cp` causing a
# prompt when running `sudo cpupower`.
track=(
'chgrp '
'chmod '
'chown '
'cp '
'mkdir '
'mv '
'pacman -R'
'pacman -S '
'sed '
'rm '
'rmdir '
'systemctl edit '
'touch '
'trash-put '
'vim '
'visudo'
)
# Excluded commands (the defaults avoid problems with makepkg):
exclude=(
'pacman -Rnu '
'pacman -S --asdeps '
)
# Whether to automatically prepend `/usr/bin/` to the above command names. Unless
# you're using a non-systemd distro or have stuff in /usr/local/bin you want to
# track, you probably want to keep this as yes. If no, then all commands above
# must be listed by their full paths, such as `/usr/bin/sed`.
usrbin_prepend='yes'
#
# sudo-comment will avoid pushing `addcomment` to the tty/pts if there is a
# foreground process running. However you want to exclude the name of the normal
# shell process from that check. Different terminals may have different defaults
# (ex. `/bin/bash` versus `/usr/bin/bash`). Make sure what is written here
# matches what you see in ps ax.
shell=(
'-bash'
'/bin/bash'
)
# Users who will be prompted for comments when using sudo. If blank, all users
# will be.
run_by_user=(
)
# Users for whom running sudo as that user (sudo -u) will prompt a comment. By
# default, only root.
run_as_user=(
'root'
)
# Editor to use for addcomment.
editor='/usr/bin/rvim "+normal Go"'
#
# sudo log file location. This must also be changed in the init script/service
# and in etc/sudoers.
sudolog='/var/log/sudo.log'
#
# sudo-comment log file location.
commentlog='/var/log/comment.log'
#
# Temporary directory to keep comments in until they are appended to the log.
tmpdir='/tmp/sudo-comment'