.\" Automatically generated by Pod::Man version 1.15
.\" Thu Apr 25 09:34:54 2002
.\"
.\" Standard preamble:
.\" ======================================================================
.de Sh \" Subsection heading
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Ip \" List item
.br
.ie \\n(.$>=3 .ne \\$3
.el .ne 3
.IP "\\$1" \\$2
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R

.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  | will give a
.\" real vertical bar.  \*(C+ will give a nicer C++.  Capital omega is used
.\" to do unbreakable dashes and therefore won't be available.  \*(C` and
.\" \*(C' expand to `' in nroff, nothing in troff, for use with C<>
.tr \(*W-|\(bv\*(Tr
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` 
.    ds C' 
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" If the F register is turned on, we'll generate index entries on stderr
.\" for titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and
.\" index entries marked with X<> in POD.  Of course, you'll have to process
.\" the output yourself in some meaningful fashion.
.if \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.\"
.\" For nroff, turn off justification.  Always turn off hyphenation; it
.\" makes way too many mistakes in technical documents.
.hy 0
.if n .na
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.bd B 3
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ======================================================================
.\"
.\" Japanese Version Copyright (c) 2000-2002 Yuichi SATO
.\"         all rights reserved.
.\" Translated Sat Oct 14 19:24:27 JST 2000
.\"         by Yuichi SATO <ysato444@yahoo.co.jp>
.\" Updated & Modified Tue Nov 19 02:21:57 JST 2002 by Yuichi SATO
.\"
.\"WORD:	
.\"WORD:	Backus Naur Form	Хåʥˡ
.\"WORD:	definition		
.\"WORD:	production rule		§
.\"WORD:	symbol			ܥ
.\"WORD:	alias			ꥢ
.\"WORD:	parentheses		
.\"WORD:	boolean			
.\"WORD:	pound sign		㡼׵
.\"WORD:	reserved word		ͽ
.\"WORD:	exclamation point	ò
.\"
.IX Title "sudoers 5"
.TH sudoers 5 "1.6.6" "April 25, 2002" "MAINTENANCE COMMANDS"
.UC
.SH "̾"
sudoers \- ɤΥ桼¹ԤǤ뤫Υꥹ
.SH ""
.IX Header ""
\fIsudoers\fR եϡ2 ĤΥפΥȥ꤫鹽롣
(ŪˤѿǤ) ꥢ
(ï¹ԤǤ뤫ꤹ) 桼Ǥ롣
\fIsudoers\fR ʸˡϡ Extended Backus-Naur Form (\s-1EBNF\s0)
(ĥХåʥˡ) Ѥǰʲ˵Ҥ롣
\&\s-1EBNF\s0 ΤʤƤʤǤۤ
\&\s-1EBNF\s0 ϳ˴ñʲˤĤƤ롣
.Sh "\s-1EBNF\s0 δñʥ"
.IX Subsection "\s-1EBNF\s0 δñʥ"
\&\s-1EBNF\s0 ϸʸˡ򵭽ҤñǸ̩ˡǤ롣
\&\s-1EBNF\s0 γϡ\fI§\fRʤäƤ롣
.PP
.Vb 1
\& ܥ ::=  | ̤ 1 | ̤ 2 ...
.Ve
\fI§\fR¾§򻲾Ȥ롣
Τ褦ˤƸʸˡǤ롣
\s-1EBNF\s0 ϰʲΤ褦ʥڥ졼ޤࡣ
¿οͤɽǤߤ
Ȥϰۤʤ̣ä
\*(L"磻ɥ\*(R" ʸȺƱƤϤʤʤ
(: ԤϥΥ磻ɥɥѥΤȤ
.BR regex (7)

.BR glob (7)
򻲾ȤΤ)
.Ip "\f(CW\*(C`?\*(C'\fR" 8
.IX Item "?"
֤줿ܥ (ޤϡܥΥ롼) 
άǽǤ뤳Ȥ̣롣
Ĥޤꡢܥ뤬 1 о줹뤫뤤о줷ʤǤ롣
.Ip "\f(CW\*(C`*\*(C'\fR" 8
.IX Item "*"
֤줿ܥ (ޤϡܥΥ롼)  0 İʾо줹롣
.Ip "\f(CW\*(C`+\*(C'\fR" 8
.IX Item "+"
֤줿ܥ (ޤϡܥΥ롼)  1 İʾо줹롣
.PP
̤Ȥȥܥ򥰥롼פˤޤȤ뤳ȤǤ롣
ʹߤǤϡ(ܥ̾ǤϤʤ) ʸ̤ʸ
󥰥륯 ('') Ѥ롣
.Sh "ꥢ"
.IX Subsection "ꥢ"
\&\f(CW\*(C`User_Alias\*(C'\fR, \f(CW\*(C`Runas_Alias\*(C'\fR,
\&\f(CW\*(C`Host_Alias\*(C'\fR, \f(CW\*(C`Cmnd_Alias\*(C'\fR
Ȥ 4 Υꥢ롣
.PP
.Vb 4
\& Alias ::= 'User_Alias'  User_Alias (':' User_Alias)* |
\&           'Runas_Alias' Runas_Alias (':' Runas_Alias)* |
\&           'Host_Alias'  Host_Alias (':' Host_Alias)* |
\&           'Cmnd_Alias'  Cmnd_Alias (':' Cmnd_Alias)*
.Ve
.Vb 1
\& User_Alias ::= NAME '=' User_List
.Ve
.Vb 1
\& Runas_Alias ::= NAME '=' Runas_List
.Ve
.Vb 1
\& Host_Alias ::= NAME '=' Host_List
.Ve
.Vb 1
\& Cmnd_Alias ::= NAME '=' Cmnd_List
.Ve
.Vb 1
\& NAME ::= [A-Z]([A-Z][0-9]_)*
.Ve
\fIꥢ\fRϡηȤ롣
.PP
.Vb 1
\& Alias_Type NAME = item1, item2, ...
.Ve
 \fIAlias_Type\fR ϡ \f(CW\*(C`User_Alias\*(C'\fR, 
\&\f(CW\*(C`Runas_Alias\*(C'\fR, \f(CW\*(C`Host_Alias\*(C'\fR,
\&\f(CW\*(C`Cmnd_Alias\*(C'\fR Τ 1 ĤǤ롣
\&\f(CW\*(C`NAME\*(C'\fR ϡʸ
ʸ ('_') 鹽ʸǤ롣
\&\f(CW\*(C`NAME\*(C'\fR ʸϤޤäƤʤ\fBʤʤ\fR
 (':') ǤĤʤС
Ʊ쥿פʣΥꥢ 1 Ԥ֤ȤǤ롣
󤲤롣
.PP
.Vb 1
\& Alias_Type NAME = item1, item2, item3 : NAME = item4, item5
.Ve
³ơͭ\fIꥢ\fRФǤ򵭽Ҥ롣
.PP
.Vb 2
\& User_List ::= User |
\&               User ',' User_List
.Ve
.Vb 4
\& User ::= '!'* username |
\&          '!'* '%'group |
\&          '!'* '+'netgroup |
\&          '!'* User_Alias
.Ve
\&\f(CW\*(C`User_List\*(C'\fR ˤϡ桼̾桼 ID ('#' դ)
ƥ॰롼 ('%' դ) 
ͥåȥ롼 ('+' դ)
̤Υꥢ 1 İʾޤޤ롣
ꥹȤγƥƥˤϡ1 İʾ '!' ڥ졼֤Ƥ褤
Ĥ '!' ڥ졼ϥƥ̵ͤˤ롣
ĤΥڥ졼ϡߤ껦Ǥ롣
.PP
.Vb 2
\& Runas_List ::= Runas_User |
\&                Runas_User ',' Runas_List
.Ve
.Vb 5
\& Runas_User ::= '!'* username |
\&                '!'* '#'uid |
\&                '!'* '%'group |
\&                '!'* +netgroup |
\&                '!'* Runas_Alias
.Ve
\&\f(CW\*(C`Runas_List\*(C'\fR  \f(CW\*(C`User_List\*(C'\fR ȻƤ뤬
('#' դ) uid ޤ뤳ȤǤ롣
ޤ \f(CW\*(C`User_Alias\*(C'\fRes ǤϤʤ
\&\f(CW\*(C`Runas_Alias\*(C'\fRes ޤ뤳ȤǤ롣
.PP
.Vb 2
\& Host_List ::= Host |
\&               Host ',' Host_List
.Ve
.Vb 5
\& Host ::= '!'* hostname |
\&          '!'* ip_addr |
\&          '!'* network(/netmask)? |
\&          '!'* '+'netgroup |
\&          '!'* Host_Alias
.Ve
\&\f(CW\*(C`Host_List\*(C'\fR ˤϡۥ̾\s-1IP\s0 ɥ쥹
ͥåȥֹ桦ͥåȥ롼 ('+' դ)
¾Υꥢ 1 İʾޤޤ롣
Ǥ⡢ƥͤ '!' ڥ졼ˤä̵ˤ롣
ͥåȥֹ˥ͥåȥޥꤷʤ硢
ۥȤΥͥå\fI󥿡ե\fRΥͥåȥޥ
ޥå󥰤κݤ˻Ȥ롣
ͥåȥޥϡɥåȤ 4 Ĥ˶ڤäɽ (㤨 255.255.255.0) 
\s-1CIDR\s0 ɽ (ӥåȤο㤨 24) ΤɤǻꤷƤ褤
ۥ̾ˤϡΥ磻ɥ
(ʲΡ֥磻ɥɡפΥ򻲾) ȤäƤ褤
׻ \f(CW\*(C`hostname\*(C'\fR ޥɤ
ʥɥᥤ̾դΥۥ֤̾ʤ
磻ɥɤȤ褦ˤˤϡ
\fIfqdn\fR ץꤹɬפ
.PP
.Vb 2
\& Cmnd_List ::= Cmnd |
\&               Cmnd ',' Cmnd_List
.Ve
.Vb 3
\& commandname ::= filename |
\&                 filename args |
\&                 filename '""'
.Ve
.Vb 3
\& Cmnd ::= '!'* commandname |
\&          '!'* directory |
\&          '!'* Cmnd_Alias
.Ve
\&\f(CW\*(C`Cmnd_List\*(C'\fR ϡޥ̾ǥ쥯ȥꡦ̤Υꥢ
1 İʾޤޤꥹȤǤ롣
ޥ̾ϴʥե̾ǡΥ磻ɥ
(ʲΡ֥磻ɥɡץ򻲾) ȤȤǤ롣
ñʤե̾ˤȡ˾ߤΰȤȤ˥ޥɤ¹Ԥ뤳ȤǤ롣
 (磻ɥɤޤ)
ޥɥ饤ꤹ뤳ȤǤ롣
ȿФˡޥɥ饤\fBʤ\fRǥޥɤ¹Ԥˤϡ
\&\f(CW\*(C`""\*(C'\fR ꤹɤ
ǥ쥯ȥ '/' Ǥ봰ʥѥ̾Ǥ롣
\&\f(CW\*(C`Cmnd_List\*(C'\fR ǥǥ쥯ȥꤹȡ
桼ϤΥǥ쥯ȥˤƤΥե¹ԤǤ
(Υ֥ǥ쥯ȥˤեϼ¹ԤǤʤ)
.PP
\&\f(CW\*(C`Cmnd\*(C'\fR ޥɥ饤ȴϢŤƤ硢
\&\f(CW\*(C`Cmnd\*(C'\fR ΰϡ
桼ޥɥ饤ǻꤷȴ˥ޥåʤФʤʤ
(磻ɥɤäϡȴ˥ޥåʤФʤʤ)
\&',', ':', '=', '\e' Ȥʸ
ޥɥ饤ȤƻȤ硢
\&'\e' ǥפʤФʤʤդ뤳ȡ
.Sh "ǥե"
.IX Subsection "ǥե"
ꥪץͤ
1 ԰ʾ \f(CW\*(C`Default_Entry\*(C'\fR ԤȤäơ
ǥեȤͤѹ뤳ȤǤ롣
ιԤ̤ϰϤϡƤΥۥȾƤΥ桼ˤ뤳Ȥ⡢
ꤷۥȾƤΥ桼ˤ뤳Ȥ⡢
ꤷ桼ˤ뤳ȤǤ롣
ʣΥȥ꤬ޥåϡ֤ŬѤ롣
̷⤹ͤϡޥåԤκǸ̤ͤġ
.PP
.Vb 3
\& Default_Type ::= 'Defaults' ||
\&                  'Defaults' ':' User ||
\&                  'Defaults' '@' Host
.Ve
.Vb 1
\& Default_Entry ::= Default_Type Parameter_List
.Ve
.Vb 4
\& Parameter ::= Parameter '=' Value ||
\&               Parameter '+=' Value ||
\&               Parameter '-=' Value ||
\&               '!'* Parameter ||
.Ve
Parameter  \fBե饰\fR\fB\fR
\fBʸ\fR\fBꥹ\fRΤ줫Ǥ롣
ե饰ϼ¤ϿͤǤꡢ'!' ڥ졼 off ˤǤ롣
ʸ󡦥ꥹȤΥѥ᡼Τʤˤ⿿ͤΰ̣ǻȤΤꡢ
̵ˤǤ롣
ͤʣΥɤޤޤϡ
֥륯 (\f(CW\*(C`"\*(C'\fR) ǰϤޤʤФʤʤ
üʸϥХåå (\f(CW\*(C`\e\*(C'\fR) 
פʤФʤʤ
.PP
ꥹȤˤϤ¾ 2 Ĥڥ졼
\&\f(CW\*(C`+=\*(C'\fR  \f(CW\*(C`\-=\*(C'\fR 롣
Υڥ졼Ϥ줾ꥹȤɲäȺԤ
\&\f(CW\*(C`\-=\*(C'\fR ڥ졼Ȥä
ꥹȤ¸ߤʤǤȥ顼ˤʤ롣
.PP
\fIsudoers\fR եϤ뤿ᡢ
ǥեȥ Host, User, Cmnd ꥢ
桼ˤդ뤳ȡ
.PP
\&\fBե饰\fR:
.Ip "long_otp_prompt" 12
.IX Item "long_otp_prompt"
(\fBS/Key\fR  \fB\s-1OPIE\s0\fR ʤɤ)
󥿥ѥɤѤƤˤΥץͭˤʤäƤȡ
ʥɥϤѥɤ
ñ˥åȡڡȤǤ褦ˡ2 ԤΥץץȤȤ롣
ǥեȤˤΤɤʤȸͤ⤤롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "ignore_dot" 12
.IX Item "ignore_dot"
Υե饰ꤹȡĶѿ \f(CW\*(C`PATH\*(C'\fR ˤ 
(ȥǥ쥯ȥɽ) '.'  '' ̵뤵롣
\f(CW\*(C`PATH\*(C'\fR ΤΤѹʤ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "mail_always" 12
.IX Item "mail_always"
桼 \fBsudo\fR ¹Ԥ٤ˡ\fImailto\fR 桼˥᡼뤬롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "mail_badpass" 12
.IX Item "mail_badpass"
sudo ¹Ԥ桼ѥɤϤʤä硢
\fImailto\fR 桼˥᡼뤬롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "mail_no_user" 12
.IX Item "mail_no_user"
Υե饰ꤹȡ
sudo ư桼 \fIsudoers\fR եˤʤ硢
\fImailto\fR 桼˥᡼뤬롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.Ip "mail_no_host" 12
.IX Item "mail_no_host"
Υե饰ꤹȡ
sudo ư桼 \fIsudoers\fR ե¸ߤ뤬
ߤΥۥȤǥޥɤ¹Ԥ뤳ȤĤƤʤ硢
\fImailto\fR 桼˥᡼뤬롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "mail_no_perms" 12
.IX Item "mail_no_perms"
Υե饰ꤹȡ
桼 \fBsudo\fR ȤȤϵĤƤ뤬
¹Ԥ褦Ȥޥɤ \fIsudoers\fR եΥȥˤʤ硢
\fImailto\fR 桼˥᡼뤬롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "tty_tickets" 12
.IX Item "tty_tickets"
Υե饰ꤹȡ
桼 tty ǧڤʤФʤʤ
̾\fBsudo\fR ϥåȥǥ쥯ȥˤ
¹ԤƤ桼Ʊ̾Υǥ쥯ȥȤ
Υե饰 on ˤʤäƤȡ\fBsudo\fR 
åȥǥ쥯ȥˤ
桼󤷤Ƥ tty бե̾Ȥ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "lecture" 12
.IX Item "lecture"
Υե饰ꤹȡ
 \fBsudo\fR ¹ԤȤ桼û쥯㡼롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.Ip "authenticate" 12
.IX Item "authenticate"
Υե饰ꤹȡ
桼ϥѥ (⤷ϡ̤ǧˡ) ǼʬȤФ
ǧڤ򤷤ʤФʤʤ
ΥǥեȤͤ \f(CW\*(C`PASSWD\*(C'\fR 
\f(CW\*(C`NOPASSWD\*(C'\fR ȤäѹǤ롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.Ip "root_sudo" 12
.IX Item "root_sudo"
Υե饰ꤹȡroot  \fBsudo\fR ¹ԤǤ롣
Υե饰 off ˤȡ
桼 \f(CW\*(C`"sudo sudo /bin/sh"\*(C'\fR Τ褦ˤ
root Υꤷ褦 \*(L"ĩ魯\*(R" ȤɻߤǤ롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.Ip "log_host" 12
.IX Item "log_host"
Υե饰ꤹȡ
ۥ̾ (syslog ǤϤʤ) \fBsudo\fR ե˵Ͽ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "log_year" 12
.IX Item "log_year"
Υե饰ꤹȡ
4 ǯ (syslog ǤϤʤ) \fBsudo\fR ե˵Ͽ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "shell_noargs" 12
.IX Item "shell_noargs"
Υե饰ꤵƤ \fBsudo\fR ʤǵưȡ
\&\fB\-s\fR ե饰Ϳ줿Ʊͤư롣
Ĥޤꡢsudo ϥ root ȤƼ¹Ԥ
(Ķѿ \f(CW\*(C`SHELL\*(C'\fR ꤵƤ硢
ϤδĶѿǷꤵ롣
ꤵƤʤ硢
ư桼 /etc/passwd Υȥˤ륷Ȥ)
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "set_home" 12
.IX Item "set_home"
Υե饰ꤵƤ
\fBsudo\fR  \fB\-s\fR ե饰ǵưȡ
Ķѿ \f(CW\*(C`HOME\*(C'\fR оݥ桼Υۡǥ쥯ȥꤵ
(ξоݥ桼ϡ\fB\-u\fR ץǻꤵʤ¤ root Ǥ)
Υե饰ϡ\fB\-s\fR ե饰Ȥ줿
\fB\-H\fR ۤΤͭˤ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "always_set_home" 12
.IX Item "always_set_home"
Υե饰ꤹȡ\fBsudo\fR ϴĶѿ \f(CW\*(C`HOME\*(C'\fR 
оݥ桼 (\fB\-u\fR ץȤʤ¤ root) 
ۡǥ쥯ȥꤹ롣
Υե饰 \fB\-H\fR ۤΤͭˤ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "path_info" 12
.IX Item "path_info"
̾ \fBsudo\fR ϥޥɤ \f(CW\*(C`PATH\*(C'\fR 
Ķѿ˸Ĥʤ桼˹Τ롣
̾Υ桼Ǥʤ¹ԥեξ˴ؤ
Ǥʤ褦ˡ
ȤˤäƤϤιΤ桼˹Ԥʤ褦ˤȤ뤫⤷ʤ
ΤԤʤȡ
ñ˼¹ԥե뤬桼 \f(CW\*(C`PATH\*(C'\fR ˤʤξǤ⡢
\fBsudo\fR ϥ桼ˡּ¹ԵĤʤפƤޤ
ʶ路ʤ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "preserve_groups" 12
.IX Item "preserve_groups"
ǥեȤǤϡ\fBsudo\fR ϥ롼ץ٥ȥ
оݥ桼°륰롼פΥꥹȤǽ롣
\fIpreserve_groups\fR ꤵ줿硢
桼˻äƤ륰롼ץ٥ȥѹʤ
¥롼 ID ȼ¸롼 ID ϡ
оݥ桼˥ޥå褦ꤵ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "fqdn" 12
.IX Item "fqdn"
\fIsudoers\fR ե˴ʥɥᥤ̾դΥۥ̾줿ϡ
Υե饰ꤹ롣
ʤ myhost ǤϤʤ myhost.mydomain.edu ȤǤ롣
Υե饰ꤷƤ⡢ȤûȤȤǤ
(ûȴʷ򺮤ƻȤȤǤ)
\fIfqdn\fR  on ˤȡ\fBsudo\fR 
\s-1DNS\s0 Υååפɬפˤʤ뤳Ȥդ뤳ȡ
\s-1DNS\s0 Υååפ򤹤ȡ
\s-1DNS\s0 ƯƤʤȤ
(׻ͥåȥ³Ƥʤʤ)
\fBsudo\fR ϰǤʤʤ롣
\s-1DNS\s0 ˤۥȤ̾ȤʤФʤʤˤդ뤳ȡ
Ĥޤꡢѥեޥ󥹤
\s-1DNS\s0 ƤΥꥢǤʤȤ꤫顢
ۥ̾Υꥢ (\f(CW\*(C`CNAME\*(C'\fR ȥ) ȤȤϤǤʤ
(\f(CW\*(C`hostname\*(C'\fR ޥɤ֤) ׻Υۥ̾
˥ɥᥤ̾դδʤΤǤ硢
\fIfqdn\fR ꤹ٤ǤϤʤ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "insults" 12
.IX Item "insults"
Υե饰ꤹȡ\fBsudo\fR 
ʥѥɤϤ桼롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "requiretty" 12
.IX Item "requiretty"
Υե饰ꤹȡ
桼 real tty 󤷤ƤȤΤ \fBsudo\fR ¹ԤǤ롣
\fIrsh\fR\|(1)  tty ݤʤΤǡ
\f(CW\*(C`"rsh somehost sudo ls"\*(C'\fR  ȤäȤĤʤʤ롣
tty ʤȥäʤΤǡ
ϻ˥ѥɤƤޤΤɻߤ뤿ˡ
Υե饰ꤷȻפȤ⤢
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "env_editor" 12
.IX Item "env_editor"
Υե饰ꤹȡ\fBvisudo\fR 
ǥեȤΥǥꥹȤȤˡ
Ķѿ \s-1EDITOR\s0  \s-1VISUAL\s0 ͤȤ
桼ϥ˵Ͽ뤳Ȥʤ
ǤդΥޥɤ root ȤƼ¹ԤǤƤޤΤǡ
ƥۡäƤޤȤդ뤳ȡ
ذƤȤƤϡ
ޤǶڤäǥΥꥹȤ
\f(CW\*(C`editor\*(C'\fR ѿꤹ뤳ȤǤ롣
\fBvisudo\fR ϡ
\f(CW\*(C`editor\*(C'\fR ˻ꤵ줿ͤ
\s-1EDITOR\s0 ޤ \s-1VISUAL\s0 ޥåȤˤΤߡ
δĶѿȤ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "rootpw" 12
.IX Item "rootpw"
Υե饰ꤹȡ\fBsudo\fR 
ư桼ΥѥɤǤϤʤ
root Υѥɤ׵᤹롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "runaspw" 12
.IX Item "runaspw"
Υե饰ꤹȡ\fBsudo\fR 
ư桼ΥѥɤǤϤʤ
\fIrunas_default\fR ץ줿桼
(ǥեȤǤ \f(CW\*(C`root\*(C'\fR) Υѥɤ׵᤹롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "targetpw" 12
.IX Item "targetpw"
Υե饰ꤹȡ\fBsudo\fR 
ư桼ΥѥɤǤϤʤ
\fB\-u\fR ե饰ǻꤵ줿桼
(ǥեȤǤ \f(CW\*(C`root\*(C'\fR) Υѥɤ׵᤹롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.Ip "set_logname" 12
.IX Item "set_logname"
̾ \fBsudo\fR ϴĶѿ \f(CW\*(C`LOGNAME\*(C'\fR 
\f(CW\*(C`USER\*(C'\fR оݥ桼
(\fB\-u\fR ե饰ǻꤵʤФդĤ root) ̾ꤹ롣
ºݤΥ桼μ̤
\f(CW\*(C`LOGNAME\*(C'\fR Ȥץ 
(\s-1RCS\s0 revision control system ʤɤޤޤ) Τǡ
εưѹȤ⤢롣
ˤ set_logname ץ \fIoff\fR ˤФ褤
.Ip "stay_setuid" 12
.IX Item "stay_setuid"
̾ \fBsudo\fR ޥɤ¹Ԥ硢
 UID ȼ¹ UID оݥ桼 (ǥեȤ root) ꤵ롣
Υץϼ \s-1UID\s0 
ư桼 \s-1UID\s0 Τޤޤˤ褦ưѹ롣
ȡΥץ \fBsudo\fR  setuid åѡȤ
ưȤȤǤ롣
ϥץब setuid Ƽ¹ԤȤ
Ū˴ʵǽ̵ˤƤ륷ƥΩġ
 \fBsudo\fR ϵư桼μ UID Ǽ¹ԤΤǡ
\s-1OS\s0 ˤ륷ʥ setuid ץߺѤˤäƤϡ
\fBsudo\fR Ԥ˵Ͽ˥桼 kill Ǥդ뤳ȡ
.Ip "env_reset" 12
.IX Item "env_reset"
Υե饰ꤹȡ\fBsudo\fR ϰʲѿΤߤޤ褦
ĶꥻåȤ: \f(CW\*(C`HOME\*(C'\fR, \f(CW\*(C`LOGNAME\*(C'\fR, 
\f(CW\*(C`PATH\*(C'\fR, \f(CW\*(C`SHELL\*(C'\fR, \f(CW\*(C`TERM\*(C'\fR,
\f(CW\*(C`USER\*(C'\fR (\f(CW\*(C`SUDO_*\*(C'\fR ʳ)
Τ \f(CW\*(C`TERM\*(C'\fR 
δĶ饳ԡ롣
¾ѿϥǥեȤͤꤵ
(\fIset_logname\fR ץͤѹǽ)
\fBsudo\fR  \f(CW\*(C`SECURE_PATH\*(C'\fR ץդ
ѥ뤵Ƥ硢
ͤϴĶѿ \f(CW\*(C`PATH\*(C'\fR ˻Ȥ롣
¾ѿ \fIenv_keep\fR ץ¸뤳ȤǤ롣
.Ip "use_loginclass" 12
.IX Item "use_loginclass"
Υե饰ꤹȡ\fBsudo\fR ϡ
оݥ桼Υ󥯥饹С˻ꤵ줿ǥեȤͤŬѤ롣
\fBsudo\fR  (ѥ) \-\-with-logincap ץ
ꤵƤˤΤߡͭǤ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.PP
\fB\fR:
.Ip "passwd_tries" 12
.IX Item "passwd_tries"
\fBsudo\fR Ԥ˵ϿƽλޤǤˡ
桼ѥɤϤǤ
ǥեȤ \f(CW\*(C`3\*(C'\fR
.PP
\fBͤȤƤѤ\fR:
.Ip "loglinelen" 12
.IX Item "loglinelen"
ե 1 ʸ
ͤϡե򸫤䤹뤿ˡ
Ԥ򲿷ޤ֤ꤹ뤿˻Ȥ롣
syslog եˤϲƶե˱ƶ롣
ǥեȤ \&\f(CW\*(C`80\*(C'\fR (ޤ֤򤷤ʤ 0 ꤹ)
.Ip "timestamp_timeout" 12
.IX Item "timestamp_timeout"
\fBsudo\fR ٥ѥɤҤͤޤǤ˷в᤹ʬ
ǥեȤ \f(CW\*(C`5\*(C'\fR
˥ѥɤ׵ᤵˤ \f(CW\*(C`0\*(C'\fR ꤹ롣
\f(CW\*(C`0\*(C'\fR 꾮ͤꤹȡ
桼Υॹפϼʤ
ϥ桼ȤΥॹפκ
\f(CW\*(C`sudo \-v\*(C'\fR 
\f(CW\*(C`sudo \-k\*(C'\fR Dzǽˤ뤿˻Ȥ
.Ip "passwd_timeout" 12
.IX Item "passwd_timeout"
\fBsudo\fR Υѥ׵᤬ڤˤʤޤǤʬ
ǥեȤ \f(CW\*(C`5\*(C'\fR
ѥ׵λڤʤˤ \f(CW\*(C`0\*(C'\fR ꤹ롣
.Ip "umask" 12
.IX Item "umask"
ޥɤ¹Ԥ umask
桼 umask 񤭤ʤˤϡ
Υץ̵ˤ뤫 0777 ꤹ뤳ȡ
ǥեȤ \f(CW\*(C`0022\*(C'\fR
.PP
\&\fBʸ\fR:
.Ip "mailsub" 12
.IX Item "mailsub"
\fImailto\fR 桼᡼ Subject (̾)
 \f(CW\*(C`%h\*(C'\fR Ϸ׻Υۥ̾Ÿ롣
ǥեȤ \f(CW\*(C`*** SECURITY information for %h ***\*(C'\fR
.Ip "badpass_message" 12
.IX Item "badpass_message"
桼ʥѥɤϤɽå
insults ꤵƤʤ¤ꡢ
ǥեȤ \f(CW\*(C`Sorry, try again.\*(C'\fR
.Ip "timestampdir" 12
.IX Item "timestampdir"
\fBsudo\fR ॹץե֤ǥ쥯ȥꡣ
ǥեȤ \fI/var/run/sudo\fR
.Ip "passprompt" 12
.IX Item "passprompt"
ѥɤҤͤȤ˻ȤǥեȤΥץץȡ
\fB\-p\fR ץĶѿ
\f(CW\*(C`SUDO_PROMPT\*(C'\fR ȤäѹǤ롣
2 ĤΥפݡȤƤ롣
\*(L"%u\*(R" ϥ桼Υ̾Ÿ졢
\*(L"%h\*(R" ϥۥ̾Ÿ롣
ǥեȤͤ \f(CW\*(C`Password:\*(C'\fR
.Ip "runas_default" 12
.IX Item "runas_default"
\fB\-u\fR ե饰ޥɥ饤ǻꤵƤʤˡ
ޥɤ¹ԤǥեȤΥ桼
ǥեȤ \f(CW\*(C`root\*(C'\fR
.Ip "syslog_goodpri" 12
.IX Item "syslog_goodpri"
桼ǧڤ˻Ȥ syslog  priority
ǥեȤ \f(CW\*(C`notice\*(C'\fR
.Ip "syslog_badpri" 12
.IX Item "syslog_badpri"
桼ǧڤ˼Ԥ˻Ȥ syslog  priority
ǥեȤ \f(CW\*(C`alert\*(C'\fR
.Ip "editor" 12
.IX Item "editor"
\fBvisudo\fR ǻѲǽʥǥΥꥹȡ
ꥹȤϥ (':') Ƕڤ롣
\fBvisudo\fR ϥ桼 \s-1USER\s0 ĶѿꤵƤˤϡ
˥ޥå륨ǥ򤹤롣
ꤵƤʤϡꥹȤκǽ˽񤫤Ƥ
ǥ¸ߤƼ¹ԲǽǤС򤹤롣
ǥեȤϥƥ vi Υѥ
.PP
\fBͤȤƤѤʸ\fR:
.Ip "logfile" 12
.IX Item "logfile"
(syslog եǤϤʤ) \fBsudo\fR եؤΥѥ
ѥꤹȡΥեإϿ롣
ꤷʤСϿʤ
.Ip "syslog" 12
.IX Item "syslog"
εϿ syslog ȤƤ syslog  facility
(syslog ˤεϿ򤷤ʤϡꤷʤ)
ǥեȤ \f(CW\*(C`local2\*(C'\fR
.Ip "mailerpath" 12
.IX Item "mailerpath"
ٹ᡼Τ˻Ȥ᡼ץΥѥ
ǥեȤϡ˸Ĥä sendmail Υѥ
.Ip "mailerflags" 12
.IX Item "mailerflags"
᡼顼ưȤ˻Ȥե饰
ǥեȤ \fB\-t\fR
.Ip "mailto" 12
.IX Item "mailto"
ٹ᡼ȥ顼᡼륢ɥ쥹
ɥ쥹ϡsudo  \f(CW\*(C`@\*(C'\fR ᤷʤ褦ˡ
֥륯 (\f(CW\*(C`"\*(C'\fR) dzʤФʤʤ
ǥեȤ \f(CW\*(C`root\*(C'\fR
.Ip "exempt_group" 12
.IX Item "exempt_group"
Υ롼פ°桼ϡѥɤ \s-1PATH\s0 ɬפʤ
ǥեȤǤꤵƤʤ
.Ip "verifypw" 12
.IX Item "verifypw"
Υץϡ桼 \fBsudo\fR  \fB\-v\fR ץǼ¹ԤȤˡ
ĥѥɤɬפȤ뤫椹롣
ΥץˤϰʲͤΤ줫Ǥ롣
.RS 12
.Ip "all" 8
.IX Item "all"
ѥɤϤʤǤޤ뤿ˤϡ
ߤΥۥȤΤ٤ƤΥ桼 \fIsudoers\fR ȥ
\f(CW\*(C`NOPASSWD\*(C'\fR ե饰ꤵƤʤФʤʤ
.Ip "any" 8
.IX Item "any"
ѥɤϤʤǤޤ뤿ˤϡ
ߤΥۥȤξʤȤͤΥ桼
\fIsudoers\fR ȥ \f(CW\*(C`NOPASSWD\*(C'\fR ե饰
ꤵƤʤФʤʤ
.Ip "never" 8
.IX Item "never"
桼ϡ\fB\-v\fR ե饰Ȥݤ˥ѥɤɬפȤʤ
.Ip "always" 8
.IX Item "always"
桼ϡ\fB\-v\fR ե饰Ȥݤ˾˥ѥɤϤʤФʤʤ
.RE
.RS 12
.Sp
ǥեȤͤ `all' Ǥ롣
.RE
.Ip "listpw" 12
.IX Item "listpw"
Υץϡ桼 \fBsudo\fR  \fB\-l\fR ץǼ¹ԤȤˡ
ĥѥɤɬפȤ뤫椹롣
ΥץˤϰʲͤΤ줫Ǥ롣
.RS 12
.Ip "all" 8
.IX Item "all"
ѥɤϤʤǤޤ뤿ˤϡ
ߤΥۥȤΤ٤ƤΥ桼 \fIsudoers\fR ȥ
\f(CW\*(C`NOPASSWD\*(C'\fR ե饰ꤵƤʤФʤʤ
.Ip "any" 8
.IX Item "any"
ѥɤϤʤǤޤ뤿ˤϡ
ߤΥۥȤξʤȤͤΥ桼 \fIsudoers\fR ȥ
\f(CW\*(C`NOPASSWD\*(C'\fR ե饰ꤵƤʤФʤʤ
.Ip "never" 8
.IX Item "never"
桼ϡ\fB\-l\fR ե饰Ȥݤ˥ѥɤɬפȤʤ
.Ip "always" 8
.IX Item "always"
桼ϡ\fB\-l\fR ե饰Ȥݤ˾˥ѥɤϤʤФʤʤ
.RE
.RS 12
.Sp
ǥեȤͤ `any' Ǥ롣
.RE
.PP
\fBͤȤƤѤꥹ\fR:
.Ip "env_check" 12
.IX Item "env_check"
ѿͤ \f(CW\*(C`%\*(C'\fR ʸޤ \f(CW\*(C`/\*(C'\fR ʸ
ޤǤˡ桼δĶĶѿ
ɤͤ˽񤫤줿ץˤ
printf ȼɤˤ롣
ϥ֥륯ơǰϤڡڤΥꥹȡ
ޤϥȤʤ 1 ĤͤǤ롣
ꥹȤִɲá̵ϡ줾
\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, 
\f(CW\*(C`\-=\*(C'\fR, \f(CW\*(C`!\*(C'\fR ڥ졼ǽ롣
åĶѿΥǥեȤΥꥹȤϡ
\fBsudo\fR  \fI\-V\fR ĤƼ¹Ԥɽ롣
.Ip "env_delete" 12
.IX Item "env_delete"
桼δĶĶѿ
ϥ֥륯ơǰϤڡڤΥꥹȡ
ޤϥȤʤ 1 ĤͤǤ롣
ꥹȤִɲá̵ϡ줾
\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, 
\f(CW\*(C`\-=\*(C'\fR, \f(CW\*(C`!\*(C'\fR ڥ졼ǽ롣
åĶѿΥǥեȤΥꥹȤϡ
\fBsudo\fR  \fI\-V\fR ĤƼ¹Ԥɽ롣
.Ip "env_keep" 12
.IX Item "env_keep"
\fIenv_reset\fR ץ󤬼¹ԤȤˡ
桼δĶ¸Ķѿ
ˤ \fBsudo\fR\ ưץĶ٤Ǥ롣
ϥ֥륯ơǰϤڡڤΥꥹȡ
ޤϥȤʤ 1 ĤͤǤ롣
ꥹȤִɲá̵ϡ줾
\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, 
\f(CW\*(C`\-=\*(C'\fR, \f(CW\*(C`!\*(C'\fR ڥ졼ǽ롣
ΥꥹȤϥǥեȤǤϲޤޤʤ
.PP
\fIsyslog\fR\|(3) ǥϿƤ硢
\fBsudo\fR  syslog  facility (\fBsyslog\fR ѥ᡼) Ȥơ
\fBauthpriv\fR (\s-1OS\s0 ݡȤƤ),
\fBauth\fR, \fBdaemon\fR, \fBuser\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR,
\fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR, \fBlocal7\fR
դ롣
syslog  priority ȤƤϡ
\fBalert\fR, \fBcrit\fR, \fBdebug\fR, \fBemerg\fR,
\fBerr\fR, \fBinfo\fR, \fBnotice\fR, \fBwarning\fR
ݡȤƤ롣
.Sh "桼"
.IX Subsection "桼"
.Vb 2
\& User_Spec ::= User_list Host_List '=' Cmnd_Spec_List \e
\&               (':' User_Spec)*
.Ve
.Vb 2
\& Cmnd_Spec_List ::= Cmnd_Spec |
\&                    Cmnd_Spec ',' Cmnd_Spec_List
.Ve
.Vb 1
\& Cmnd_Spec ::= Runas_Spec? ('NOPASSWD:' | 'PASSWD:')? Cmnd
.Ve
.Vb 1
\& Runas_Spec ::= '(' Runas_List ')'
.Ve
\fB桼\fRϡꤷۥȾǥ桼 (ɤΥ桼Ȥ)
ɤΥޥɤ¹ԤǤ뤫ꤹ롣
ǥեȤǤϥޥɤ \fBroot\fR ȤƼ¹Ԥ뤬
ϥޥѹǽǤ롣
.PP
桼ǤȤʬƤߤ롣
.Sh "Runas_Spec"
.IX Subsection "Runas_Spec"
\f(CW\*(C`Runas_Spec\*(C'\fR ñ
() \f(CW\*(C`Runas_List\*(C'\fR ̤dzäΤǤ롣
桼 \f(CW\*(C`Runas_Spec\*(C'\fR ꤷʤȡ
\fBroot\fR ΥǥեȤ \f(CW\*(C`Runas_Spec\*(C'\fR Ȥ롣
\f(CW\*(C`Runas_Spec\*(C'\fR ϡθ³ޥɤΥǥեȤꤹ롣
Ĥޤ:
.PP
.Vb 1
\& dgb    boulder = (operator) /bin/ls, /bin/kill, /usr/bin/who
.Ve
Τ褦ʥȥ꤬硢
桼 \fBdgb\fR ϡ\fI/bin/ls\fR, \fI/bin/kill\fR, \fI/usr/bin/lprm\fR 
¹ԤǤ롣\*(--  \fBoperator\fR ȤƤΤߡ㤨:
.PP
.Vb 1
\&    sudo -u operator /bin/ls.
.Ve
\f(CWRunas_Spec\fR 夫饨ȥǾ񤭤뤳ȤǽǤ롣
.PP
.Vb 1
\& dgb    boulder = (operator) /bin/ls, (root) /bin/kill, /usr/bin/lprm
.Ve
Τ褦˽ȡ
桼 \fBdgb\fR  \fI/bin/ls\fR  \fBoperator\fR Ȥơ
ޤ \fI/bin/kill\fR  \fI/usr/bin/lprm\fR  \fBroot\fR Ȥ
¹Ԥ뤳ȤĤ롣
.Sh "\s-1NOPASSWD\s0  \s-1PASSWD\s0"
.IX Subsection "NOPASSWD  PASSWD"
ǥեȤǤϡ\fBsudo\fR 
ޥɤ¹Ԥ˥桼ȤǧڤɬפȤ롣
ư \f(CW\*(C`NOPASSWD\*(C'\fR ѹ뤳ȤǤ롣
\f(CW\*(C`Runas_Spec\*(C'\fR Ʊͤˡ\f(CW\*(C`NOPASSWD\*(C'\fR 
ޥɤΥǥեȤ򤽤θ³
\f(CW\*(C`Cmnd_Spec_List\*(C'\fR ꤹ롣
դ \f(CW\*(C`PASSWD\*(C'\fR Ϥ򸵤᤹˻Ȥ롣
㤨:
.PP
.Vb 1
\& ray    rushmore = NOPASSWD: /bin/kill, /bin/ls, /usr/bin/lprm
.Ve
Ȥȡ桼 \fBray\fR ༫Ȥؤǧڤʤ
׻ rushmore  \fBroot\fR Ȥ
\fI/bin/kill\fR, \fI/bin/ls\fR, \fI/usr/bin/lprm\fR 
¹Ԥ뤳ȤǤ롣
\fBray\fR  \fI/bin/kill\fR 
ѥɤʤǼ¹Ԥ褦ˤ硢ȥϼΤ褦ˤʤ롣
.PP
.Vb 1
\& ray    rushmore = NOPASSWD: /bin/kill, PASSWD: /bin/ls, /usr/bin/lprm
.Ve
\f(CW\*(C`PASSWD\*(C'\fR  exempt_group ץ
ꤵ줿롼פ°Ƥ桼ˤϸ̤ʤդ뤳ȡ
.PP
ǥեȤǤϡߤΥۥȾΤ桼Τɤ줫Υȥ
\f(CW\*(C`NOPASSWD\*(C'\fR ŬѤƤС
Υ桼 \f(CW\*(C`sudo \-l\*(C'\fR 
ѥɤʤ˼¹ԤǤ褦ˤʤ롣
ˡ桼θߤΥۥȤ˴ϢƤΥȥ
\f(CW\*(C`NOPASSWD\*(C'\fR ˸¤ꡢ
Υ桼 \f(CW\*(C`sudo \-v\*(C'\fR 
ѥɤʤ˼¹ԤǤ褦ˤʤ롣
ư verifypw  listpw ץȤäѹǤ롣
.Sh "磻ɥ (̾᥿饯):"
.IX Subsection "磻ɥ (̾᥿饯):"

\fBsudo\fR  \fIsudoers\fR եˤơ
ޥɥ饤ѥ̾Ф
\fI磻ɥ\fRȤȤǤ롣
磻ɥɤΥޥå󥰤ϡ
\fB\s-1POSIX\s0\fR  \f(CW\*(C`fnmatch(3)\*(C'\fR 롼ȤäƹԤ롣
ɽ\fIǤϤʤ\fRդ뤳ȡ
.Ip "\f(CW\*(C`*\*(C'\fR" 8
.IX Item "*"
Ǥդ 0 İʾʸ˥ޥå롣
.Ip "\f(CW\*(C`?\*(C'\fR" 8
.IX Item "?"
Ǥդ 1 Ĥʸ˥ޥå롣
.Ip "\f(CW\*(C`[...]\*(C'\fR" 8
.IX Item "[...]"
ꤷϰϤˤǤդʸ˥ޥå롣
.Ip "\f(CW\*(C`[!...]\*(C'\fR" 8
.IX Item "[!...]"
ꤷϰϤ\fBʤ\fRǤդʸ˥ޥå롣
.Ip "\f(CW\*(C`\ex\*(C'\fR" 8
.IX Item "x"
\*(L"x\*(R" ɾǤդʸ \*(L"x\*(R"
ϡ\*(L"*\*(R", \*(L"?\*(R", \*(L"[\*(R", \*(L"}\*(R" Τ褦
ʸФƻȤ롣
.PP
եɥå ('/') ϡѥ̾ǻȤ磻ɥɤФƤ
ޥå\fBʤ\fRդ뤳ȡ
ޥɥ饤Фƥޥå󥰤򤹤硢
åϥ磻ɥɤ˥ޥå\fB\fR

.PP
.Vb 1
\&    /usr/bin/*
.Ve
Τ褦ʥѥ
\f(CW\*(C`/usr/bin/who\*(C'\fR ˤϥޥå
\f(CW\*(C`/usr/bin/X11/xterm\*(C'\fR ˤϥޥåʤ褦ˤ뤿Ǥ롣
.Sh "磻ɥɤε§ˤ㳰:"
.IX Subsection "磻ɥɤε§ˤ㳰:"
ε§Фơ㳰ŬѤ롣
.if n .Ip "\f(CW""""""""\fR" 8
.el .Ip "\f(CW``''\fR" 8
.IX Item """""
ʸ \f(CW\*(C`""\*(C'\fR  \fIsudoers\fR ȥ
ͣΥޥɥ饤Ǥ硢
֥ޥɤ˰\fBĤ\fRȤϡ¹Ԥ뤳ȤĤʤ
ȤȤ̣롣
.Sh "¾üʸͽ:"
.IX Subsection "¾üʸͽ:"
㡼׵ ('#') ϥȤɽ˻Ȥ롣
(桼̾ǻȤƤϽ
ޤ1 İʾο³Ƥơ桼 ID Ȥư)
ʸȤʹߤΥƥȤϡޤ̵뤵롣
.PP
ͽ \fB\s-1ALL\s0\fR ȹߤ\fIꥢ\fRǡ
˥ޥå롣
ͽϤɤǤȤ롣
Ȥʤϡ
\f(CW\*(C`Cmnd_Alias\*(C'\fR, \f(CW\*(C`User_Alias\*(C'\fR, 
\f(CW\*(C`Runas_Alias\*(C'\fR, \f(CW\*(C`Host_Alias\*(C'\fR
Ȥȡ
\fB\s-1ALL\s0\fR Ȥ \fIꥢ\fR ʬ褦ȤƤϤʤʤ
ȹߤΥꥢͥ褵뤫Ǥ롣
\fB\s-1ALL\s0\fR Ȥȴˤʤǽդ뤳ȡ
ʤʤ顢򥳥ޥɤλǻȤȡ
桼ϥƥ\fBƤ\fRޥɤ¹ԤǤ뤫Ǥ롣
.PP
ò ('!') ϡ\fIꥢ\fR \f(CW\*(C`Cmnd\*(C'\fR ǡ
ؤ \fInot\fR ڥ졼ȤƻȤȤǤ롣
ˤꡢͤӽǤ롣
 \f(CW\*(C`!\*(C'\fR 
ȹߤ \f(CW\*(C`ALL\*(C'\fR ꥢȤ߹碌ơ
桼 \*(L"ƤǤϤʤ\*(R" ޥɤ¹ԤǤ褦
褦ȤƤ⡢տޤ褦ư뤳ȤϵǤդ뤳
(ʲ\s-1֥ƥա\s0򻲾)
.PP
ĹԤϡХåå ('\e') ԤκǸʸˤ
³뤳ȤǤ롣
.PP
ꥹȤˤ빽Ǵ֤ζ䡢
\fI桼\fRˤüʹʸʸ
('=', ':', '(', ')') ϡʤƤ褤
.PP
\&'@', '!', '=', ':', ',', '(', ')', '\e'
Ȥʸ (㤨С桼̾ۥ̾) ΰȤƻȤϡ
Хåå ('\e') ǥפʤФʤʤ
.SH ""
.IX Header ""
ʲ \fIsudoers\fR ȥǤ롣
ľʤȤĤϾ虜Ȥ餷
Ϥ\fIꥢ\fR롣
.PP
.Vb 4
\& # User alias specification
\& User_Alias     FULLTIMERS = millert, mikef, dowdy
\& User_Alias     PARTTIMERS = bostley, jwfox, crawl
\& User_Alias     WEBMASTERS = will, wendy, wim
.Ve
.Vb 3
\& # Runas alias specification
\& Runas_Alias    OP = root, operator
\& Runas_Alias    DB = oracle, sybase
.Ve
.Vb 9
\& # Host alias specification
\& Host_Alias     SPARC = bigtime, eclipse, moet, anchor :\e
\&                SGI = grolsch, dandelion, black :\e
\&                ALPHA = widget, thalamus, foobar :\e
\&                HPPA = boa, nag, python
\& Host_Alias     CUNETS = 128.138.0.0/255.255.0.0
\& Host_Alias     CSNETS = 128.138.243.0, 128.138.204.0/24, 128.138.242.0
\& Host_Alias     SERVERS = master, mail, www, ns
\& Host_Alias     CDROM = orion, perseus, hercules
.Ve
.Vb 12
\& # Cmnd alias specification
\& Cmnd_Alias     DUMPS = /usr/bin/mt, /usr/sbin/dump, /usr/sbin/rdump,\e
\&                        /usr/sbin/restore, /usr/sbin/rrestore
\& Cmnd_Alias     KILL = /usr/bin/kill
\& Cmnd_Alias     PRINTING = /usr/sbin/lpc, /usr/bin/lprm
\& Cmnd_Alias     SHUTDOWN = /usr/sbin/shutdown
\& Cmnd_Alias     HALT = /usr/sbin/halt, /usr/sbin/fasthalt
\& Cmnd_Alias     REBOOT = /usr/sbin/reboot, /usr/sbin/fastboot
\& Cmnd_Alias     SHELLS = /usr/bin/sh, /usr/bin/csh, /usr/bin/ksh, \e
\&                         /usr/local/bin/tcsh, /usr/bin/rsh, \e
\&                         /usr/local/bin/zsh
\& Cmnd_Alias     SU = /usr/bin/su
.Ve
ʲǤϡѥΥǥեͤΤĤ񤭤롣
\fBsudo\fR  \fIsyslog\fR\|(3) Ȥä
ƤξˤĤ \fIauth\fR facility ǥϿ롣
ե륿Υåդˤϡ\fBsudo\fR Υ쥯㡼ɬפʤ
ޤ桼 \fBmillert\fR ϥѥɤϤʤƤ褤褦ˤ롣
 \f(CW\*(C`Host_Alias\*(C'\fR  \fI\s-1SERVERS\s0\fR ˤ׻
(syslog Ȥ̤) Υե¸
ĹȥǯϤ¸뤿˥γƹԤǯϿ롣
.PP
.Vb 5
\& # Override built in defaults
\& Defaults               syslog=auth
\& Defaults:FULLTIMERS    !lecture
\& Defaults:millert       !authenticate
\& Defaults@SERVERS       log_year, logfile=/var/log/sudo.log
.Ve
\fI桼\fRϡï¹ԤǤ뤫ºݤ˷ꤷƤʬǤ롣
.PP
.Vb 2
\& root           ALL = (ALL) ALL
\& %wheel         ALL = (ALL) ALL
.Ve
\fBroot\fR  \fBwheel\fR 롼פΥ桼ˡ
ƤΥ桼ȤơƤΥۥȾΥޥɤ¹ԤǤ褦ˤƤ롣
.PP
.Vb 1
\& FULLTIMERS     ALL = NOPASSWD: ALL
.Ve
ե륿Υƥ (\fBmillert\fR, \fBmikef\fR, \fBdowdy\fR) ϡ
ʬȤǧڤ򤹤뤳ȤʤƤΥۥȾƤΥޥɤ¹ԤǤ롣
.PP
.Vb 1
\& PARTTIMERS     ALL = ALL
.Ve
ѡȥΥƥ (\fBbostley\fR, \fBjwfox\fR, \fBcrawl\fR) ϡ
ƤΥۥȾƤΥޥɤ¹ԤǤ뤬
(ȥ \f(CW\*(C`NOPASSWD\*(C'\fR ʤΤ)
ǽ˼ʬȤǧڤɬפǤ롣
.PP
.Vb 1
\& jack           CSNETS = ALL
.Ve
桼 \fBjack\fR ϡ\fI\s-1CSNETS\s0\fR ꥢ 
(ͥåȥ \f(CW\*(C`128.138.243.0\*(C'\fR, 
\f(CW\*(C`128.138.204.0\*(C'\fR, \f(CW\*(C`128.138.242.0\*(C'\fR)
ˤ׻ǡƤΥޥɤ¹ԤǤ롣
ΥͥåȥΤ
ͥåȥ \f(CW\*(C`128.138.204.0\*(C'\fR 
饹 C ͥåȥ򼨤Ū (\s-1CIDR\s0 ɽ) ͥåȥޥ롣
\fI\s-1CSNETS\s0\fR ˤ¾ΥͥåȥˤĤƤϡ
ޥå󥰤κݤ˥η׻ΥͥåȥޥȤ롣
.PP
.Vb 1
\& lisa           CUNETS = ALL
.Ve
桼 \fBlisa\fR ϡ\fI\s-1CUNETS\s0\fR ꥢ
(饹 B ͥåȥ \f(CW\*(C`128.138.0.0\*(C'\fR) ˤ
ƤΥۥȤǡƤΥޥɤ¹ԤǤ롣
.PP
.Vb 2
\& operator       ALL = DUMPS, KILL, PRINTING, SHUTDOWN, HALT, REBOOT,\e
\&                /usr/oper/bin/
.Ve
桼 \fBoperator\fR ϡ
ñʥƥʥѤΥޥɤ˸¤äƼ¹Ԥ뤳ȤǤ롣
ϥǥ쥯ȥ \fI/usr/oper/bin/\fR ˤ륳ޥƤǡ
Хååסץ killƥࡦƥΥåȥ
ȤäȤ˴ϢΤǤ롣
.PP
.Vb 1
\& joe            ALL = /usr/bin/su operator
.Ve
桼 \fBjoe\fR ϡoperator ˤʤ뤿 \fIsu\fR\|(1) ¹ԤǤʤ
.PP
.Vb 1
\& pete           HPPA = /usr/bin/passwd [A-z]*, !/usr/bin/passwd root
.Ve
桼 \fBpete\fR ϡ\fI\s-1HPPA\s0\fR ׻
root ʳƤΥ桼Υѥɤѹ뤳ȤĤƤ롣
Ǥϡ\fIpasswd\fR\|(1) ޥɥ饤󤫤
ʣΥ桼̾դʤȤꤷƤդ뤳ȡ
.PP
.Vb 1
\& bob            SPARC = (OP) ALL : SGI = (OP) ALL
.Ve
桼 \fBbob\fR ϡ\fI\s-1SPARC\s0\fR  \fI\s-1SGI\s0\fR ׻ǡ
\f(CW\*(C`Runas_Alias\*(C'\fR  \fI\s-1OP\s0\fR ˥ꥹȤ줿桼
(\fBroot\fR  \fBoperator\fR) ȤơƤΥޥɤ¹ԤǤ롣
.PP
.Vb 1
\& jim            +biglab = ALL
.Ve
桼 \fBjim\fR ϡ\fIbiglab\fR ͥåȥ롼פˤƤη׻ǡ
ƤΥޥɤ¹ԤǤ롣
\fBsudo\fR ϡ\*(L"biglab\*(R" ͥåȥ롼פǤ뤳Ȥ
ץեå '+' ˤäΤ롣
.PP
.Vb 1
\& +secretaries   ALL = PRINTING, /usr/bin/adduser, /usr/bin/rmuser
.Ve
\fBsecretaries\fR ͥåȥ롼פ°桼ϡ
桼ɲáǤʤץ󥿴򤹤ɬפΤǡ
ΥޥɤƤη׻Ǽ¹Ԥ뤳ȤĤƤ롣
.PP
.Vb 1
\& fred           ALL = (DB) NOPASSWD: ALL
.Ve
桼 \fBfred\fR ϡ\f(CW\*(C`Runas_Alias\*(C'\fR 
\fI\s-1DB\s0\fR ˤ桼
(\fBoracle\fR  \fBsybase\fR) Ȥơѥɤʤǥޥɤ¹ԤǤ롣
.PP
.Vb 1
\& john           ALPHA = /usr/bin/su [!-]*, !/usr/bin/su *root*
.Ve
\fIALPHA\fR ׻ǡ桼 \fBjohn\fR ϡ
su  root ʳƤΥ桼ˤʤ롣
 \fIsu\fR\|(1) ˥ե饰ꤹ뤳ȤϤǤʤ
.PP
.Vb 1
\& jen            ALL, !SERVERS = ALL
.Ve

桼 \fBjen\fR ϡ\f(CW\*(C`Host_Alias\*(C'\fR 
\fI\s-1SERVERS\s0\fR ˤ׻
(master, mail, www, ns) ʳǡƤΥޥɤ¹ԤǤ롣
.PP
.Vb 1
\& jill           SERVERS = /usr/bin/, !SU, !SHELLS
.Ve
\f(CW\*(C`Host_Alias\*(C'\fR  \fI\s-1SERVERS\s0\fR ˤ׻ǡ
\fBjill\fR  /usr/bin ǥ쥯ȥˤƤΥޥɤ¹ԤǤ롣
\f(CW\*(C`Cmnd_Aliases\*(C'\fR 
\fI\s-1SU\s0\fR  \fI\s-1SHELLS\s0\fR °Ƥ륳ޥɤϽ
.PP
.Vb 1
\& steve          CSNETS = (operator) /usr/local/op_commands/
.Ve
桼 \fBsteve\fR ϡǥ쥯ȥ /usr/local/op_commands/ ˤ
ƤΥޥɤ¹ԤǤ롣桼 operator ȤƤΤ߼¹ԤǤ롣
.PP
.Vb 1
\& matt           valkyrie = KILL
.Ve
\fBmatt\fR ϡθĿͤΥơ valkyrie ǡ
ϥ󥰤ץ kill Ǥɬפ롣
.PP
.Vb 1
\& WEBMASTERS     www = (www) ALL, (root) /usr/bin/su www
.Ve
ۥ www ǡ\f(CW\*(C`User_Alias\*(C'\fR 
\fI\s-1WEBMASTERS\s0\fR ˤ桼
(will, wendy, wim) ϡ(web ڡͭƤ) 桼 www Ȥ
ƤΥޥɤ¹ԤǤ롣
ޤñ \fIsu\fR\|(1)  www ˤʤ롣
.PP
.Vb 2
\& ALL            CDROM = NOPASSWD: /sbin/umount /CDROM,\e
\&                /sbin/mount -o nosuid\e,nodev /dev/cd0a /CDROM
.Ve
ƤΥ桼ϡ\f(CW\*(C`Host_Alias\*(C'\fR 
\s-1CD-ROM\s0 ˤ׻ (orion, perseus, hercules) 
ѥɤʤ \s-1CD-ROM\s0 ΥޥȤȥޥȤǤ롣
Υޥɤ桼ϤΤĹѤʤΤǡ
륹ץȤ˽񤤤ƥץ벽Ƥޤ褤
.SH "ƥ"
.IX Header "ƥ"
\&'!' ڥ졼Ȥä \f(CW\*(C`ALL\*(C'\fR 
ޥɤ \*(L"\*(R" Ȥϡ̤ͭǤʤ
桼ϡߤޥɤ̤̾ǥԡƼ¹ԤС
ñ˲ǤƤޤ
󤲤롣
.PP
.Vb 1
\&    bill        ALL = ALL, !SU, !SHELLS
.Ve
Ǥϡºݤˤ \fI\s-1SU\s0\fR 
\fI\s-1SHELLS\s0\fR ˥ꥹȤƤ륳ޥɤ
\fBbill\fR ˼¹Ԥʤ褦ˤ뤳ȤǤʤ
ʤʤ顢bill ϡΥޥɤ̤̾˥ԡꡢ
ǥ¾ΥޥɤΥ륨פȤ뤫Ǥ롣
äơΤ褦¤ϡŪʤΤȹͤ٤Ǥ
(˥ݥꥷǶ٤Ǥ)
.SH "ٹ"
.IX Header "ٹ"
\fIsudoers\fR եϡ\fB\fR \fBvisudo\fR ޥɤԽ٤Ǥ롣
Υޥɤϡեåʸˡå򤹤롣
\fBsudo\fR 
\fIsudoers\fR ե뤬ʸˡŪ˴ְäƤȼ¹ԤǤʤΤǡ
\fIsudoers\fR ˤϥ顼ҤȤĤ̵褦ˤʤФʤʤ
.PP
(桼ΤǤϤʤ) ׻Υͥåȥ롼פȤ硢
(褯褦) ͥåȥ롼פ
ʥɥᥤ̾դΥۥ̾硢
ۥ̾ \f(CW\*(C`hostname\*(C'\fR ޥɤ֤
ʥɥᥤ̾դΤΤǤɬפ롣
ޤ \fIsudoers\fR  \fIfqdn\fR ץꤹɬפ롣
.SH "ե"
.IX Header "ե"
.Vb 3
\& /etc/sudoers           ï¹ԤǤ뤫Υꥹ
\& /etc/group             Υ롼ץե
\& /etc/netgroup          ͥåȥ롼פΥꥹ
.Ve
.SH "Ϣ"
.IX Header "Ϣ"
\&\fIrsh\fR\|(1), \fIsudo\fR\|(8), \fIvisudo\fR\|(8), \fIsu\fR\|(1), \fIfnmatch\fR\|(3).