Bug 188

Summary: Sudo 1.6.7p5 Configuration Defaults set_logname
Product: Sudo Reporter: José Antonio Ramos Rubio <jrubio>
Component: ConfigureAssignee: Todd C. Miller <Todd.Miller>
Status: RESOLVED INVALID    
Severity: normal    
Priority: normal    
Version: 1.6.7   
Hardware: IBM   
OS: AIX   

Description José Antonio Ramos Rubio 2005-07-08 14:19:19 MDT
I'm trying to configure sudo using !set_logname, when I try to save the file I 
receive the error that I have a syntax error.

I view the manual and didn't see any problem.


Sudo version 1.6.7p5
Operating Systema AIX 5.2 Maintenance Level 6

Outputs:
*************
sudo -V

Sudo version 1.6.7p5

Authentication methods: 'passwd'
Syslog facility if syslog is being used for logging: local2
Syslog priority to use when user authenticates successfully: notice
Syslog priority to use when user authenticates unsuccessfully: alert
Send mail if the user is not in sudoers
Lecture user the first time they run sudo
Require users to authenticate by default
Root may run sudo
Allow some information gathering to give useful error messages
Set the LOGNAME and USER environment variables
Length at which to wrap log file lines (0 for no wrap): 80
Authentication timestamp timeout: 5 minutes
Password prompt timeout: 5 minutes
Number of tries to enter a password: 3
Umask to use or 0777 to use user's: 022
Path to mail program: /usr/sbin/sendmail
Flags for mail program: -t
Address to send mail to: root
Subject line for mail messages: *** SECURITY information for %h ***
Incorrect password message: Sorry, try again.
Path to authentication timestamp dir: /tmp/.odus
Default password prompt: Password:
Default user to run commands as: root
Path to the editor for use by visudo: /usr/bin/vi
Environment variables to check for sanity:
        LANGUAGE
        LANG
        LC_*
Environment variables to remove:
        BASH_ENV
        ENV
        TERMCAP
        TERMPATH
        TERMINFO_DIRS
        TERMINFO
        LIBPATH
        _RLD*
        LD_*
        PATH_LOCALE
        NLSPATH
        HOSTALIASES
        RES_OPTIONS
        LOCALDOMAIN
        IFS
When to require a password for 'list' pseudocommand: any
When to require a password for 'verify' pseudocommand: all
Local IP address and netmask pairs:
        140.240.11.2 / 0xffffff00
        200.35.72.14 / 0xffffff00

************
sudo -L

Available options in a sudoers ``Defaults'' line:

syslog: Syslog facility if syslog is being used for logging
syslog_goodpri: Syslog priority to use when user authenticates successfully
syslog_badpri: Syslog priority to use when user authenticates unsuccessfully
long_otp_prompt: Put OTP prompt on its own line
ignore_dot: Ignore '.' in $PATH
mail_always: Always send mail when sudo is run
mail_badpass: Send mail if user authentication fails
mail_no_user: Send mail if the user is not in sudoers
mail_no_host: Send mail if the user is not in sudoers for this host
mail_no_perms: Send mail if the user is not allowed to run a command
tty_tickets: Use a separate timestamp for each user/tty combo
lecture: Lecture user the first time they run sudo
authenticate: Require users to authenticate by default
root_sudo: Root may run sudo
log_host: Log the hostname in the (non-syslog) log file
log_year: Log the year in the (non-syslog) log file
shell_noargs: If sudo is invoked with no arguments, start a shell
set_home: Set $HOME to the target user when starting a shell with -s
always_set_home: Always set $HOME to the target user's home directory
path_info: Allow some information gathering to give useful error messages
fqdn: Require fully-qualified hostnames in the sudoers file
insults: Insult the user when they enter an incorrect password
requiretty: Only allow the user to run sudo if they have a tty
env_editor: Visudo will honor the EDITOR environment variable
rootpw: Prompt for root's password, not the users's
runaspw: Prompt for the runas_default user's password, not the users's
targetpw: Prompt for the target user's password, not the users's
use_loginclass: Apply defaults in the target user's login class if there is one
set_logname: Set the LOGNAME and USER environment variables
stay_setuid: Only set the effective uid to the target user, not the real uid
env_reset: Reset the environment to a default set of variables
preserve_groups: Don't initialize the group vector to that of the target user
loglinelen: Length at which to wrap log file lines (0 for no wrap)
timestamp_timeout: Authentication timestamp timeout
passwd_timeout: Password prompt timeout
passwd_tries: Number of tries to enter a password
umask: Umask to use or 0777 to use user's
logfile: Path to log file
mailerpath: Path to mail program
mailerflags: Flags for mail program
mailto: Address to send mail to
mailsub: Subject line for mail messages
badpass_message: Incorrect password message
timestampdir: Path to authentication timestamp dir
timestampowner: Owner of the authentication timestamp dir
exempt_group: Users in this group are exempt from password and PATH requirements
passprompt: Default password prompt
runas_default: Default user to run commands as
editor: Path to the editor for use by visudo
env_check: Environment variables to check for sanity
env_delete: Environment variables to remove
env_keep: Environment variables to preserve
listpw: When to require a password for 'list' pseudocommand
verifypw: When to require a password for 'verify' pseudocommand


******************
Extract sudoers file

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification
Host_Alias LOCAL=sears07

# User alias specification
User_Alias GENEU=genesix

#Run Alias
Runas_Alias SEC= jsotos01
Runas_Alias ROOT= root
Runas_Alias GENE= genesix

# Cmnd alias specification
Cmnd_Alias ADSM= /usr/tivoli/tsm/client/ba/bin/dsmc
Cmnd_Alias LOGIN = /usr/bin/rlogin
Cmnd_Alias RCP = /usr/bin/rcp
Cmnd_Alias RSH = /usr/bin/rsh

# Overwrite Defaults
Defaults>root    !set_logname

# User privilege specification
root            ALL=(ALL) ALL
genesix         ALL=NOPASSWD:LOGIN,RSH,RCP
Comment 1 Todd C. Miller 2008-06-11 09:36:18 MDT
Unable to reproduce.