Konfigurationsdatei /etc/sudoers durch neue Defaultversion ersetzen

[Rüdiger Kupper]

Beim Upgrade zu jammy alte Version beibehalten.

Todo

Unsere Anpassungen nach /etc/sudoers.d/ schreiben, dann Defaultversion des Pakets installieren.

Diff:

--- /etc/sudoers        2016-09-18 19:46:58.000000000 +0200
+++ /etc/sudoers.dpkg-new       2022-02-08 09:41:40.000000000 +0100
@@ -9,6 +9,30 @@
 Defaults       env_reset
 Defaults       mail_badpass
 Defaults       secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
+Defaults       use_pty
+
+# This preserves proxy settings from user environments of root
+# equivalent users (group sudo)
+#Defaults:%sudo env_keep += "http_proxy https_proxy ftp_proxy all_proxy no_proxy"
+
+# This allows running arbitrary commands, but so does ALL, and it means
+# different sudoers have their choice of editor respected.
+#Defaults:%sudo env_keep += "EDITOR"
+
+# Completely harmless preservation of a user preference.
+#Defaults:%sudo env_keep += "GREP_COLOR"
+
+# While you shouldn't normally run git as root, you need to with etckeeper
+#Defaults:%sudo env_keep += "GIT_AUTHOR_* GIT_COMMITTER_*"
+
+# Per-user preferences; root won't have sensible values for them.
+#Defaults:%sudo env_keep += "EMAIL DEBEMAIL DEBFULLNAME"
+
+# "sudo scp" or "sudo rsync" should be able to use your SSH agent.
+#Defaults:%sudo env_keep += "SSH_AGENT_PID SSH_AUTH_SOCK"
+
+# Ditto for GPG agent
+#Defaults:%sudo env_keep += "GPG_AGENT_INFO"
 
 # Host alias specification
 
@@ -25,12 +49,6 @@
 # Allow members of group sudo to execute any command
 %sudo  ALL=(ALL:ALL) ALL
 
-# See sudoers(5) for more information on "#include" directives:
-
-#includedir /etc/sudoers.d
-
-# linuxmuster: administrator may gain root privileges
-administrator ALL=(ALL) ALL
+# See sudoers(5) for more information on "@include" directives:
 
-# linuxmuster: pgmadmin may gain root privileges
-pgmadmin ALL=(ALL) ALL
+@includedir /etc/sudoers.d