Substitute in comment characters for lines partaining to login.conf,

BSD auth and SELinux and only enable them if pertinent.
This commit is contained in:
Todd C. Miller
2008-02-18 15:53:33 +00:00
parent 2b4e67ff8e
commit b072179192

View File

@@ -552,14 +552,14 @@ flag is I<@ignore_dot@> by default.
=item ignore_local_sudoers =item ignore_local_sudoers
If set via LDAP, parsing of @sysconfdir@/sudoers will be skipped. If set via LDAP, parsing of F<@sysconfdir@/sudoers> will be skipped.
This is intended for Enterprises that wish to prevent the usage of local This is intended for Enterprises that wish to prevent the usage of local
sudoers files so that only LDAP is used. This thwarts the efforts of sudoers files so that only LDAP is used. This thwarts the efforts of
rogue operators who would attempt to add roles to @sysconfdir@/sudoers. rogue operators who would attempt to add roles to F<@sysconfdir@/sudoers>.
When this option is present, @sysconfdir@/sudoers does not even need to exist. When this option is present, F<@sysconfdir@/sudoers> does not even need to
Since this option tells B<sudo> how to behave when no specific LDAP entries exist. Since this option tells B<sudo> how to behave when no specific LDAP
have been matched, this sudoOption is only meaningful for the cn=defaults entries have been matched, this sudoOption is only meaningful for the
section. This flag is I<off> by default. C<cn=defaults> section. This flag is I<off> by default.
=item insults =item insults