Substitute in comment characters for lines partaining to login.conf,

BSD auth and SELinux and only enable them if pertinent.
This commit is contained in:
Todd C. Miller
2008-02-18 15:53:33 +00:00
parent 2b4e67ff8e
commit b072179192

View File

@@ -552,14 +552,14 @@ flag is I<@ignore_dot@> by default.
=item ignore_local_sudoers
If set via LDAP, parsing of @sysconfdir@/sudoers will be skipped.
If set via LDAP, parsing of F<@sysconfdir@/sudoers> will be skipped.
This is intended for Enterprises that wish to prevent the usage of local
sudoers files so that only LDAP is used. This thwarts the efforts of
rogue operators who would attempt to add roles to @sysconfdir@/sudoers.
When this option is present, @sysconfdir@/sudoers does not even need to exist.
Since this option tells B<sudo> how to behave when no specific LDAP entries
have been matched, this sudoOption is only meaningful for the cn=defaults
section. This flag is I<off> by default.
rogue operators who would attempt to add roles to F<@sysconfdir@/sudoers>.
When this option is present, F<@sysconfdir@/sudoers> does not even need to
exist. Since this option tells B<sudo> how to behave when no specific LDAP
entries have been matched, this sudoOption is only meaningful for the
C<cn=defaults> section. This flag is I<off> by default.
=item insults