.\" Copyright (c) 1994-1996, 1998-2005, 2007-2009
.\" 	Todd C. Miller <Todd.Miller@courtesan.com>
.\" 
.\" Permission to use, copy, modify, and distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
.\" copyright notice and this permission notice appear in all copies.
.\" 
.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" 
.\" Sponsored in part by the Defense Advanced Research Projects
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\" 
.\" Japanese Version Copyright (c) 2000-2002 Yuichi SATO
.\"   and 2009 Yoichi Chonan
.\"         all rights reserved.
.\" Translated Sat Oct  7 14:39:18 JST 2000
.\"         by Yuichi SATO <ysato444@yahoo.co.jp>
.\" Updated & Modified Fri Dec  6 04:40:44 JST 2002 by Yuichi SATO
.\" New Translation (sudo-1.6.9p17) Fri Jan 23 10:31:17 JST 2009
.\"         by Yoichi Chonan <cyoichi@maple.ocn.ne.jp>
.\" Updated & Modified (sudo-1.7.2p1) Sat Nov 14 21:15:16 JST 2009
.\"         by Yoichi Chonan
.\" Modified Tue Nov 24 20:00:00 JST 2009 by Yoichi Chonan
.\"
.\" $Sudo: sudoers.man.in,v 1.80 2009/06/30 12:41:09 millert Exp $
.\" Automatically generated by Pod::Man 2.16 (Pod::Simple 3.05)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sh \" Subsection heading
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  \*(C+ will
.\" give a nicer C++.  Capital omega is used to do unbreakable dashes and
.\" therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
.\" nothing in troff, for use with C<>.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` 
.    ds C' 
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.ie \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.el \{\
.    de IX
..
.\}
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "SUDOERS 5"
.TH SUDOERS 5 "June 30, 2009" "1.7.2p1" "MAINTENANCE COMMANDS"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH "̾"
sudoers \- ɤΥ桼¹ԤǤ뤫Υꥹ
.SH ""
.IX Header "DESCRIPTION"
\&\fIsudoers\fR եΥȥ꤫鹽Ƥ롣
(פѿǤ) ꥢ (ï¹ԤǤ뤫
ꤷƤ) 桼
.IP "[\fB\fR]:" 8
.IX Item "footnote1"
ԤȤƤϡ֥ꥢǥեȻꡢ桼λ
ȥ꤫鹽Ƥפȸä֤˹äƤΤǤϤʤȻפ
.PP
ͤΥ桼ʣΥȥ꤬ޥåȤϡ֤ŬѤ롣
ʣλ꤬ޥåƤսˤĤƤϡǸ˥ޥåΤ
Ѥ (줬ŪʥޥåȤϤʤ)
.PP
ʲǤ \fIsudoers\fR ʸˡĥ Backus-Naur ˡ (\s-1EBNF\s0) 
ȤäƵҤ롣\s-1EBNF\s0 ɤʤΤΤʤȤäơ
ʤǤȴñʤΤʲ˽ФƤˤ
ܤդƤޤ顣
.Sh "\s-1EBNF\s0 狼"
.IX Subsection "Quick guide to EBNF"
\&\s-1EBNF\s0 ϸʸˡ򵭽ҤʷǸ̩ˡǤ롣
\&\s-1EBNF\s0 θġ§ǤƤ롣ȤС
.PP
.Vb 1
\& ܥ ::=  | ̤ 1 | ̤ 2 ...
.Ve
.PP
ġ§ϡۤ§򻲾ȤΤ褦ˤƸʸˡ
夲Ƥ롣ޤ \s-1EBNF\s0 ˤϰʲα黻Ҥޤޤ뤬
ɽǸ¸ɼԤ¿֥磻ɥɡʸ
ƱʤǤ̤ΰ̣äƤ롣
.ie n .IP "\*(C`?\*(C'" 4
.el .IP "\f(CW\*(C`?\*(C'\fR" 4
.IX Item "?"
ľΥܥ (ޤϡܥΥ롼) äƤʤƤ褤Ȥ
̣롣ʤΥܥϡ1 󸽤Ƥ褤1 ⸽ʤǤ褤
.ie n .IP "\*(C`*\*(C'" 4
.el .IP "\f(CW\*(C`*\*(C'\fR" 4
.IX Item "*"
ľΥܥ (ޤϡܥΥ롼)  0 ʾ帽롣
.ie n .IP "\*(C`+\*(C'" 4
.el .IP "\f(CW\*(C`+\*(C'\fR" 4
.IX Item "+"
ľΥܥ (ޤϡܥΥ롼)  1 ʾ帽롣
.PP
ݥåȤȡʣΥܥ򥰥롼פˤޤȤ뤳ȤǤ롣
ʤ򤱤뤿ᡢʲ (ܥ̾ǤϤʤ) ʸɤ
ʸ䵭򼨤ϡ򥷥󥰥륯 ('') ǰϤळȤˤ롣
.Sh "ꥢ"
.IX Subsection "Aliases"
ꥢˤϻͼढ롣\f(CW\*(C`User_Alias\*(C'\fR,
\&\f(CW\*(C`Runas_Alias\*(C'\fR, \f(CW\*(C`Host_Alias\*(C'\fR,
\&\f(CW\*(C`Cmnd_Alias\*(C'\fR Ǥ롣
.PP
.Vb 4
\& Alias ::= \*(AqUser_Alias\*(Aq  User_Alias (\*(Aq:\*(Aq User_Alias)* |
\&           \*(AqRunas_Alias\*(Aq Runas_Alias (\*(Aq:\*(Aq Runas_Alias)* |
\&           \*(AqHost_Alias\*(Aq  Host_Alias (\*(Aq:\*(Aq Host_Alias)* |
\&           \*(AqCmnd_Alias\*(Aq  Cmnd_Alias (\*(Aq:\*(Aq Cmnd_Alias)*
\&
\& User_Alias ::= NAME \*(Aq=\*(Aq User_List
\&
\& Runas_Alias ::= NAME \*(Aq=\*(Aq Runas_List
\&
\& Host_Alias ::= NAME \*(Aq=\*(Aq Host_List
\&
\& Cmnd_Alias ::= NAME \*(Aq=\*(Aq Cmnd_List
\&
\& NAME ::= [A\-Z]([A\-Z][0\-9]_)*
.Ve
.PP
ġΥꥢϡηȤ롣
.PP
.Vb 1
\& Alias_Type NAME = item1, item2, ...
.Ve
.PP
嵭ˤơ\fIAlias_Type\fR  \f(CW\*(C`User_Alias\*(C'\fR,
\&\f(CW\*(C`Runas_Alias\*(C'\fR, \f(CW\*(C`Host_Alias\*(C'\fR,
\&\f(CW\*(C`Cmnd_Alias\*(C'\fR ΤΰĤǤ롣
\&\f(CW\*(C`NAME\*(C'\fR ϥե٥åȤʸ
 ('_') ʤʸǤ뤬\fBƬʸʸ\fR
ʤФʤʤƱפΥꥢ򡢥 (':') Ĥʤǡ
Ԥʣ񤯤ȤǤ롣ȤС
.PP
.Vb 1
\& Alias_Type NAME = item1, item2, item3 : NAME = item4, item5
.Ve
.PP
ʲǤϡꥢͭǤȤʤΤ롣
.PP
.Vb 2
\& User_List ::= User |
\&               User \*(Aq,\*(Aq User_List
\&
\& User ::= \*(Aq!\*(Aq* username |
\&          \*(Aq!\*(Aq* \*(Aq#\*(Aquid |
\&          \*(Aq!\*(Aq* \*(Aq%\*(Aqgroup |
\&          \*(Aq!\*(Aq* \*(Aq+\*(Aqnetgroup |
\&          \*(Aq!\*(Aq* \*(Aq%:\*(Aqnonunix_group |
\&          \*(Aq!\*(Aq* User_Alias
.Ve
.PP
\&\f(CW\*(C`User_List\*(C'\fR ϰİʾΡ桼̾uid ('#' 
Ƭդ)ƥ॰롼̾ ('%' Ƭդ) ͥåȥ롼̾
('+' Ƭդ) UNIX 롼̾ ('%:' Ƭդ)
\&\f(CW\*(C`User_Alias\*(C'\fR ʤ롣
ꥹȤγƹܤˤϰİʾ '!' 黻ҤդƤ褤
Ĥ '!' Ϥιܤͤꤹ롣Ĥξϸߤ껦
.PP
桼̾롼̾ͥåȥ롼̾ UNIX 롼̾ϡ
֥륯ȤǰϤСüʸ򥨥פʤǤࡣ
֥륯ȤǰϤޤüʸȤʤ顢פ 16 ʿ
ꤷƤФ褤ȤСڡʤ \ex20 Ȥ
.PP
 UNIX 롼̾ν񼰤ϡѤ륵ӥμˤäƷޤ롣ȤС
\&\s-1Quest Authentication Services\s0  \s-1AD\s0 Хåɤϡ
ʲν񼰤򥵥ݡȤƤ롣
.IP "\(bu" 4
ƱɥᥤΥ롼:  \*(L"Group Name\*(R"
.IP "\(bu" 4
ǤդΥɥᥤΥ롼:  \*(L"Group Name@FULLY.QUALIFIED.DOMAIN\*(R"
.IP "\(bu" 4
롼 \s-1SID:\s0 \*(L"S\-1\-2\-34\-5678901234\-5678901234\-5678901234\-567\*(R"
.PP
롼̾ϤǤդǤ뤳ȤդƤۤʸ
ǰϤޤʤϡڡ '@' 򥨥פ뤿ˡ
Хåå (\e) ȤʤФʤʤ
.PP
.Vb 2
\& Runas_List ::= Runas_Member |
\&                Runas_Member \*(Aq,\*(Aq Runas_List
\&
\& Runas_Member ::= \*(Aq!\*(Aq* username |
\&                  \*(Aq!\*(Aq* \*(Aq#\*(Aquid |
\&                  \*(Aq!\*(Aq* \*(Aq%\*(Aqgroup |
\&                  \*(Aq!\*(Aq* +netgroup |
\&                  \*(Aq!\*(Aq* Runas_Alias
.Ve
.PP
\&\f(CW\*(C`Runas_List\*(C'\fR  \f(CW\*(C`User_List\*(C'\fR ˻Ƥ롣
㤦Τϡ\f(CW\*(C`User_Alias\*(C'\fR ǤϤʤ
\&\f(CW\*(C`Runas_Alias\*(C'\fR Ȥ뤳Ȥ桼̾䥰롼̾
ޥåʸȤƹԤ뤳Ȥ˵դƤۤȡ
ĤΥ桼̾ (뤤ϥ롼̾) ϡƱ uid (gid) 
äƤƤ⡢̸ĤΤΤȸʤΤǤ롣
顢⤷Ʊ uid ä٤ƤΥ桼̾˥ޥåä 
(ȤСroot  toor Ȥ褦)桼̾ uid 
ȤФ褤 (ʤ顢#0 Ǥ)
.PP
.Vb 2
\& Host_List ::= Host |
\&               Host \*(Aq,\*(Aq Host_List
\&
\& Host ::= \*(Aq!\*(Aq* hostname |
\&          \*(Aq!\*(Aq* ip_addr |
\&          \*(Aq!\*(Aq* network(/netmask)? |
\&          \*(Aq!\*(Aq* \*(Aq+\*(Aqnetgroup |
\&          \*(Aq!\*(Aq* Host_Alias
.Ve
.PP
\&\f(CW\*(C`Host_List\*(C'\fR ϰİʾΡۥ̾\s-1IP\s0 ɥ쥹
ͥåȥɥ쥹ͥåȥ롼̾ (Ƭ '+' դ)
¾Υꥢʤ롣Ǥޤ'!' 黻Ҥդơܤͤ
ꤹ뤳ȤǤ롣ͥåȥɥ쥹˥ͥåȥޥ
ꤷʤäϡ\fBsudo\fR ۥȤ
ͥåȥ󥿡եİĻȤꤵ줿
ͥåȥɥ쥹Ʊɥ쥹ĥ󥿡եС
ΥͥåȥޥѤ뤳Ȥˤʤ롣ͥåȥޥλϡ
ɸ \s-1IP\s0 ɥ쥹ɽ (Ȥ 255.255.255.0 Ȥ 
ffff:ffff:ffff:ffff:: Ȥ) Ǥ褯\&\s-1CIDR\s0 ɽ (ӥåȿ
Ȥ 24 Ȥ 64 Ȥ) Ǥ褤ۥ̾ΰ˥
磻ɥɤѤ뤳ȤǤ뤬 (Υ磻ɥɤΥ
)ѥޥ \f(CW\*(C`hostname\*(C'\fR ޥɤ
ɥᥤ֤̾ʤ硢磻ɥɤ
Ѥˤ \fIfqdn\fR ץȤɬפ롣
.PP
.Vb 2
\& Cmnd_List ::= Cmnd |
\&               Cmnd \*(Aq,\*(Aq Cmnd_List
\&
\& commandname ::= filename |
\&                 filename args |
\&                 filename \*(Aq""\*(Aq
\&
\& Cmnd ::= \*(Aq!\*(Aq* commandname |
\&          \*(Aq!\*(Aq* directory |
\&          \*(Aq!\*(Aq* "sudoedit" |
\&          \*(Aq!\*(Aq* Cmnd_Alias
.Ve
.PP
\&\f(CW\*(C`Cmnd_List\*(C'\fR ϰİʾΡޥ̾ǥ쥯ȥꡢ
¾ΥꥢʤꥹȤǤ롣ޥ̾ХѥΥե̾
ꡢΥ磻ɥɤޤǤƤ⹽ʤ (Υ磻ɥɤ
򻲾)ñ˥ե̾ꤷ硢桼Ϥ˾ߤ
ɤʰǤդƤΥޥɤ¹Ԥ뤳ȤǤ롣Ȥϸ
ޥɥ饤 (磻ɥɤޤ) ꤷƤ⹽ʤ
ޤ \f(CW""\fR ꤷơΥޥɤ
\&\fBޥɥ饤ʤ\fRμ¹ԤΤߤǽȻؼ뤳ȤǤ롣
ǥ쥯ȥ '/' ǽХѥ̾Ǥ롣
\&\f(CW\*(C`Cmnd_List\*(C'\fR 
ǥ쥯ȥꤹȡ桼ϤΥǥ쥯ȥǤդΥե
¹ԤǤ褦ˤʤ (Υ֥ǥ쥯ȥˤեϼ¹ԤǤʤ)
.PP
\&\f(CW\*(C`Cmnd\*(C'\fR ޥɥ饤ȼäƤϡ
\&\f(CW\*(C`Cmnd\*(C'\fR ΰϡ桼ޥɥ饤Ǥ
Τ˰פʤФʤʤ (Cmnd ΰ˥磻ɥɤ
ʤС줬ޥɥ饤ΰȥޥåʤФʤʤ)
ʲ˵󤲤ʸ򥳥ޥɰѤȤϡ'\e' ˤä
פʤФʤʤȤդƤۤ ',', ':', '=', '\e' 
Ǥ롣ڥ륳ޥ \f(CW"sudoedit"\fR ϡ桼 
\&\fBsudo\fR  \fB-e\fR ץդ (뤤ϡ\fBsudoedit\fR Ȥ
ޥ̾) ¹Ԥ뤳ȤĤ뤿˻Ѥ롣ξ硢
ޥɥ饤뤳ȤǤΤϡ̤ΥޥɤȤޤä
ƱͤǤ롣
.Sh "ǥեȤλ (Defaults)"
.IX Subsection "Defaults"
ʤꥪץ󤬡԰ʾ \f(CW\*(C`Default_Entry\*(C'\fR Ԥ
ȤȤǼ¹Ի˥ǥեȤͤѹǽθ̤εڤϰϤϡ
ǤդΥۥȤΤ٤ƤΥ桼ˤ뤳ȤǤ뤷ΥۥȤ
٤ƤΥ桼Υ桼Υޥɡ
Υ桼ȤƼ¹Ԥ륳ޥɤ˸ꤹ뤳ȤǤ롣
դƤۤΤϡޥɤ˸ꤷ Defaults Ԥ
ޥɥ饤ޤǽ񤯤ȤǤʤȤꤹɬפ
ϡ\f(CW\*(C`Cmnd_Alias\*(C'\fR ơˤ
ȤФ褤
.PP
.Vb 5
\& Default_Type ::= \*(AqDefaults\*(Aq |
\&                  \*(AqDefaults\*(Aq \*(Aq@\*(Aq Host_List |
\&                  \*(AqDefaults\*(Aq \*(Aq:\*(Aq User_List |
\&                  \*(AqDefaults\*(Aq \*(Aq!\*(Aq Cmnd_List |
\&                  \*(AqDefaults\*(Aq \*(Aq>\*(Aq Runas_List
\&
\& Default_Entry ::= Default_Type Parameter_List
\&
\& Parameter_List ::= Parameter |
\&                    Parameter \*(Aq,\*(Aq Parameter_List
\&
\& Parameter ::= Parameter \*(Aq=\*(Aq Value |
\&               Parameter \*(Aq+=\*(Aq Value |
\&               Parameter \*(Aq\-=\*(Aq Value |
\&               \*(Aq!\*(Aq* Parameter
.Ve
.PP
ѥ᡼\fBե饰\fR\fB\fR\fBʸ\fR\fBꥹ\fR 
ɤǤ褤ե饰פ˥֡ꥢ () Ǥꡢ'!' 黻Ҥ 
off ˤǤ롣͡ʸ󡢥ꥹȤΥѥ᡼ˤ⡢ͤȤƻѤơ
̵ˤǤΤĤ¸ߤ롣ѥ᡼ͤʣñ
ޤȤϡ֥ͤ륯 (\f(CW\*(C`"\*(C'\fR) ǰϤȤ褤
üʸϥХåå (\f(CW\*(C`\e\*(C'\fR) ǥפ뤳Ȥ
Ǥ롣
.PP
ꥹȤˤ黻Ҥ \f(CW\*(C`\=\*(C'\fR Τۤˤ⤦Ĥ롣
\&\f(CW\*(C`+=\*(C'\fR  \f(CW\*(C`\-=\*(C'\fR Ǥ롣黻Ҥ
줾ꥹȤդäꡢꥹȤꤹΤ˻Ѥ롣
\&\f(CW\*(C`\-=\*(C'\fR 黻ҤȤäơꥹȤ¸ߤʤǤ
õ褦ȤƤ⡢顼ˤϤʤʤ
.PP
Defaults ԤβϤϡνǹԤ롣ǽѡHostUser 
Defaults Ϥ졢줫 RunasǸ˥ޥɤ Defaults ν֤ˤʤ롣
.PP
Defaults ԤǻѤǤѥ᡼ΥꥹȤˤĤƤϡ
SUDOERS Υץפ
.Sh "桼 (User Specification)"
.IX Subsection "User Specification"
.Vb 2
\& User_Spec ::= User_List Host_List \*(Aq=\*(Aq Cmnd_Spec_List \e
\&               (\*(Aq:\*(Aq Host_List \*(Aq=\*(Aq Cmnd_Spec_List)*
\&
\& Cmnd_Spec_List ::= Cmnd_Spec |
\&                    Cmnd_Spec \*(Aq,\*(Aq Cmnd_Spec_List
\&
\& Cmnd_Spec ::= Runas_Spec? Tag_Spec* Cmnd
\&
\& Runas_Spec ::= \*(Aq(\*(Aq Runas_List? (\*(Aq:\*(Aq Runas_List)? \*(Aq)\*(Aq
\&
\& Tag_Spec ::= (\*(AqNOPASSWD:\*(Aq | \*(AqPASSWD:\*(Aq | \*(AqNOEXEC:\*(Aq | \*(AqEXEC:\*(Aq |
\&               \*(AqSETENV:\*(Aq | \*(AqNOSETENV:\*(Aq )
.Ve
.PP
\&\fB桼\fRϡ桼ꤵ줿ۥȤ (ɤΥ桼
ѿȤ) ɤΥޥɤ¹ԤǤ뤫ꤹ롣ǥեȤǤϡ
ޥɤ \fBroot\fR ѿȤƼ¹Ԥ뤬ϥޥɤȤ
ѹ뤳ȤǤ롣
.PP
桼δܹ¤ϡï ɤ = (ïѿȤ) 
Ǥ (who where = (as_whom) what)
ʬʬ褦
.Sh "Runas_Spec (ɤΥ桼䥰롼פѿȤǤ뤫)"
.IX Subsection "Runas_Spec"
\&\f(CW\*(C`Runas_Spec\*(C'\fR ѿȤоݤȤʤ桼䥰롼פ
ꤷƤ롣ʷ  \f(CW\*(C`Runas_Spec\*(C'\fR ϡ(
褦)  (':') Ƕڤ졢åǰϤޤ줿Ĥ 
\&\f(CW\*(C`Runas_List\*(C'\fR ʤäƤ롣
ܤ \f(CW\*(C`Runas_List\*(C'\fR ϡ
\&\fBsudo\fR  \fB\-u\fR ץȤäȤѿȤǤ桼
ؤƤ롣ܤꤷƤΤϡ\fBsudo\fR  \fB\-g\fR
ץˤäƻǤ륰롼פΥꥹȤ
ξ \f(CW\*(C`Runas_List\*(C'\fR ꤵƤϡ
줾 \f(CW\*(C`Runas_List\*(C'\fR ˥ꥹȤƤ桼
롼פǤդȤ߹碌ǡޥɤ¹Ԥ뤳ȤǽǤ롣
ܤ \f(CW\*(C`Runas_List\*(C'\fR ꤵƤȤϡ
ꥹΤʤ桼ˤǤѿȤƥޥɤ¹ԤǤ뤬
\&\fB\-g\fR ץꤹ뤳ȤϤǤʤ
ܤ \f(CW\*(C`Runas_List\*(C'\fR ǡܤꤵƤϡ
\&\fBsudo\fR ¹Ԥ桼λʤǡ롼פ
\&\f(CW\*(C`Runas_List\*(C'\fR ˥ꥹȤƤǤդΥ롼פꤷơ
ޥɤ¹Ԥ뤳ȤǤ롣\f(CW\*(C`Runas_Spec\*(C'\fR ޤä
ꤵƤʤȤϡ
\&\fBroot\fR Ȥƥޥɤ¹ԤǤ뤬롼פꤹ뤳ȤϤǤʤ
.PP
\&\f(CW\*(C`Runas_Spec\*(C'\fR ϡ³ޥɤФƥǥեȤ
롣ϤɤȤȸȡΤ褦ʥȥ꤬äȤ褦
.PP
.Vb 1
\& dgb    boulder = (operator) /bin/ls, /bin/kill, /usr/bin/lprm
.Ve
.PP
桼 \fBdgb\fR  \fI/bin/ls\fR, \fI/bin/kill\fR,
\&\fI/usr/bin/lprm\fR ¹Ԥ뤳ȤǤ롣\&\fBoperator\fR 
ȤƼ¹ԤǤȤСΤ褦ˤǤ롣
.PP
.Vb 1
\& $ sudo \-u operator /bin/ls
.Ve
.PP
ȥθ \f(CW\*(C`Runas_Spec\*(C'\fR ѹ뤳Ȥǽ
Υȥ򤳤ʤդ˽ѤȤ褦
.PP
.Vb 1
\& dgb    boulder = (operator) /bin/ls, (root) /bin/kill, /usr/bin/lprm
.Ve
.PP
ȡ桼 \fBdgb\fR ϡ\fI/bin/ls\fR  \fBoperator\fR ȤƤ
\&\fI/bin/kill\fR  \fI/usr/bin/lprm\fR  \fBroot\fR λʤ
¹ԤǤ褦ˤʤ롣
.PP
\&\fBdgb\fR  \f(CW\*(C`/bin/ls\*(C'\fR ¹ԤȤ
ѿоݥ桼ȥ롼פΤɤǤ \fBoperator\fR ˤǤ褦ˡ
εҤĥ뤳ȤǤ롣
.PP
.Vb 2
\& dgb    boulder = (operator : operator) /bin/ls, (root) /bin/kill, \e
\&        /usr/bin/lprm
.Ve
.PP
Ǥϡ桼 \fBtcm\fR  ǥΥǥХե˥
ޥɤ dialer 롼פȤƼ¹ԤǤ褦ˤƤ롣
Ǥϡ롼פǤʤȤդƤۤޥɤ
桼 \fBtcm\fR λʤǼ¹ԤΤǤ롣
.PP
.Vb 2
\& tcm    boulder = (:dialer) /usr/bin/tip, /usr/bin/cu, \e
\&        /usr/local/bin/minicom
.Ve
.Sh "Tag_Spec"
.IX Subsection "Tag_Spec"
ޥɤ 0 İʾΥȼȤǤ롣ͤȤƤϡ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR, \f(CW\*(C`PASSWD\*(C'\fR,
\&\f(CW\*(C`NOEXEC\*(C'\fR, \f(CW\*(C`EXEC\*(C'\fR,
\&\f(CW\*(C`SETENV\*(C'\fR, \f(CW\*(C`NOSETENV\*(C'\fR ϻĤǽ
롣 \f(CW\*(C`Cmnd\*(C'\fR ˥򥻥åȤȡ
\&\f(CW\*(C`Cmnd_Spec_List\*(C'\fR Τʸ 
\&\f(CW\*(C`Cmnd\*(C'\fR ϡȿФΰ̣ĥˤäѹʤꡢ
ΥѾ (ʤ\f(CW\*(C`PASSWD\*(C'\fR  
\&\f(CW\*(C`NOPASSWD\*(C'\fR 񤭤\f(CW\*(C`NOEXEC\*(C'\fR  
\&\f(CW\*(C`EXEC\*(C'\fR 񤭤櫓)
.PP
\fI\s-1NOPASSWD\s0  \s-1PASSWD\s0\fR
.IX Subsection "NOPASSWD and PASSWD"
.PP
ǥեȤǤϡ\fBsudo\fR ϥޥɤ¹Ԥˡ
桼ܿͤǤ뤳Ȥ褦˵롣ο񤤤 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ˤäѹ뤳ȤǤ롣
\&\f(CW\*(C`Runas_Spec\*(C'\fR Ʊ͡\f(CW\*(C`NOPASSWD\*(C'\fR  
\&\f(CW\*(C`Cmnd_Spec_List\*(C'\fR Τ³ޥɤФ
ǥեȤ롣\f(CW\*(C`PASSWD\*(C'\fR ƯȿФǤꡢ
񤤤򸵤ᤷȤ˻Ȥ롣ȤС
.PP
.Vb 1
\& ray    rushmore = NOPASSWD: /bin/kill, /bin/ls, /usr/bin/lprm
.Ve
.PP
ȤС桼 \fBray\fR ϥޥ rushmore ǧڤ򤷤ʤǤ 
\&\fBroot\fR Ȥ \fI/bin/kill\fR, \fI/bin/ls\fR,
\&\fI/usr/bin/lprm\fR ¹ԤǤ褦ˤʤ롣⤷ \fBray\fR 
ѥɤʤǼ¹ԤǤ륳ޥɤ \fI/bin/kill\fR 
ʤꤿΤʤ顢ȥϤʤ
.PP
.Vb 1
\& ray    rushmore = NOPASSWD: /bin/kill, PASSWD: /bin/ls, /usr/bin/lprm
.Ve
.PP
桼 \fIexempt_group\fR ץǻꤵƤ륰롼פ
°ϡ\f(CW\*(C`PASSWD\*(C'\fR ̤ʤȤ
դƤۤ
.PP
ǥեȤǤϡ߻ΥۥȤ˴ؤ桼ΥȥΤ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ꤵƤΤĤǤ⤢С
Υ桼ϥѥɤʤ \f(CW\*(C`sudo \-l\*(C'\fR ¹ԤǤ롣
ʤ桼ѥɤʤ \f(CW\*(C`sudo \-v\*(C'\fR ¹ԤǤΤϡ
߻ΥۥȤ˴ؤ뤽Υ桼ΥȥΤ٤Ƥ
\&\f(CW\*(C`NOPASSWD\*(C'\fR ƤȤΤߤǤ롣ưϡ
\&\fIverifypw\fR  \fIlistpw\fR ץˤäѹǤ롣
.PP
\fI\s-1NOEXEC\s0  \s-1EXEC\s0\fR
.IX Subsection "NOEXEC and EXEC"
.PP
\&\fBsudo\fR  \fInoexec\fR ݡȤĤǥѥ뤵졢
DzƯƤ륪ڥ졼ƥ󥰥ƥबбƤ硢
\&\f(CW\*(C`NOEXEC\*(C'\fR ѤСưŪ˥󥯤줿¹ԥե뤬
餵˥ޥɤ¹ԤΤɤȤǤ롣
.PP
Ǥϡ桼 \fBaaron\fR  \fI/usr/bin/more\fR  
\&\fI/usr/bin/vi\fR ¹ԤǤ뤬롦פѤǤʤ
.PP
.Vb 1
\& aaron  shanty = NOEXEC: /usr/bin/more, /usr/bin/vi
.Ve
.PP
\&\f(CW\*(C`NOEXEC\*(C'\fR ɤʤդƯΤȤΥƥ
ѤǤ뤫ɤʤɤˤĤƤ˾ܤΤꤿä顢
֥롦פɻߤפΥˤʤäƤ
.PP
\fI\s-1SETENV\s0  \s-1NOSETENV\s0\fR
.IX Subsection "SETENV and NOSETENV"
.PP
嵭Υ \fIsetenv\fR ץͤ򥳥ޥɤȤѹ롣
դ٤ϡ륳ޥɤФ \f(CW\*(C`SETENV\*(C'\fR 
ꤵƤȡޥɥ饤󤫤ꤹɤʴĶѿ \fIenv_check\fR,
\&\fIenv_delete\fR, \fIenv_keep\fR ˤ뵬ʤȤȤǤ롣
顢ǴĶѿꤹ뤳ȤĤΤϡ
ѤǤ桼˸¤٤ʤޥå륳ޥɤ
\&\fB\s-1ALL\s0\fR äϡۤΤ \f(CW\*(C`SETENV\*(C'\fR 
Υޥɤդ뤬ΥǥեȤư
\&\f(CW\*(C`UNSETENV\*(C'\fR ȤǤäȤǤ롣
.Sh "磻ɥ"
.IX Subsection "Wildcards"
\&\fIsudoers\fR եǤϡۥ̾ޥɥ饤Υѥ̾
ޥɥ饤ΰ˥Υ磻ɥ (᥿ʸȤ
glob 饯Ȥ) ѤǤ롣磻ɥɤΥޥå󥰤
\&\fB\s-1POSIX\s0\fR  \fIglob\fR\|(3)  \fIfnmatch\fR\|(3)
롼ƥѤƹԤ롣\fBʲΤΤɽǤϤʤ\fRȤ
դƤۤ
.ie n .IP "\*(C`*\*(C'" 8
.el .IP "\f(CW\*(C`*\*(C'\fR" 8
.IX Item "*"
İʾǤդʸ˥ޥå롣
.ie n .IP "\*(C`?\*(C'" 8
.el .IP "\f(CW\*(C`?\*(C'\fR" 8
.IX Item "?"
Ǥդΰʸ˥ޥå롣
.ie n .IP "\*(C`[...]\*(C'" 8
.el .IP "\f(CW\*(C`[...]\*(C'\fR" 8
.IX Item "[...]"
ꤵ줿ϰϤǤդΰʸ˥ޥå롣
.ie n .IP "\*(C`[!...]\*(C'" 8
.el .IP "\f(CW\*(C`[!...]\*(C'\fR" 8
.IX Item "[!...]"
ꤵ줿ϰ\fBʳ\fRǤդΰʸ˥ޥå롣
.ie n .IP "\*(C`\ex\*(C'" 8
.el .IP "\f(CW\*(C`\ex\*(C'\fR" 8
.IX Item "x"
\&\*(L"x\*(R" ɤʸǤäƤ⡢\*(L"x\*(R" ΤΤȤ
ɾ롣 \*(L"*\*(R", \*(L"?\*(R", \*(L"[\*(R", \*(L"}\*(R" Ȥä
üʸ򥨥פ뤿˻Ѥ롣
.PP
ѥƥ \fIglob\fR\|(3)  \fIfnmatch\fR\|(3) ؿ
\&\s-1POSIX\s0 ʸ饹бƤʤ顢ʸ饹ѤǤ롣
\f(CW\*(Aq:\*(Aq\fR ʸϡ\fIsudoers\fR ̤ʰ̣
äƤΤǡפʤФʤʤ夲ȡ
.PP
.Vb 1
\&    /bin/ls [[\e:alpha\e:]]*
.Ve
.PP
嵭ϡʸǻϤޤɤʥե̾ˤޥå
.PP
ޥɤΥѥ̾˻Ȥ줿磻ɥɤϥեɥå ('/') 
\fBޥåʤ\fRȤդƤۤޥɥ饤Ȥ
ޥå󥰤Ǥϡ磻ɥɤϥå\fBäޥå\fR
ǡ
.PP
.Vb 1
\&    /usr/bin/*
.Ve
.PP
Ȥޥɥѥϡ\fI/usr/bin/who\fR ȥޥå뤬
\&\fI/usr/bin/X11/xterm\fR ȤϥޥåʤȤˤʤ롣
.Sh "磻ɥɡ롼㳰"
.IX Subsection "Exceptions to wildcard rules"
嵭롼ˤϼ㳰롣
.ie n .IP """""" 8
.el .IP "\f(CW``''\fR" 8
.IX Item """"""
\&\fIsudoers\fR եΥȥˤơʸ \f(CW""\fR ͣ
Υޥɥ饤äϡΥޥɤ\fBʤ\fR
Ƽ¹Ԥ뤳ȤʤȤȤǤ롣
.Sh "sudoers ¾Υե򥤥󥯥롼ɤ"
.IX Subsection "Including other files from within sudoers"
\&\f(CW\*(C`#include\*(C'\fR ̿ \f(CW\*(C`#includedir\*(C'\fR ̿
ȤС߲ \fIsudoers\fR ե˳ˤۤ
\&\fIsudoers\fR ե򥤥󥯥롼ɤ뤳ȤǤ롣
.PP
ˡȤСȤСΤǻѤ \fIsudoers\fR ե
ۤˡޥ󤴤ȤΥ \fIsudoers\fR եĤȤǤ롣
ǤϡΤ \fIsudoers\fR  \fI/etc/sudoers\fR Ȥ
ޥ󤴤Ȥ \fI/etc/sudoers.local\fR Ȥ뤳Ȥˤ褦
\&\fI/etc/sudoers\fR  \fI/etc/sudoers.local\fR 򥤥󥯥롼ɤˤϡ
\&\fI/etc/sudoers\fR ˼ιԤ񤭹ࡣ
.Sp
.RS 4
\&\f(CW\*(C`#include /etc/sudoers.local\*(C'\fR
.RE
.PP
\&\fBsudo\fR ϲ椳ιԤ˽в񤦤ȡȥե
(\fI/etc/sudoers\fR ) νߤоݤ
\&\fI/etc/sudoers.local\fR ڤؤ롣ơ
\&\fI/etc/sudoers.local\fR ޤã顢\fI/etc/sudoers\fR 
ĤΤ󥯥롼ɤ줿ե뤬¾Υե
󥯥롼ɤƤ褤󥯥롼ȤΥͥȤˤ 128 եޤǤȤ
ϡɡߥåȤäơ󥯥롼ɥեΥ롼פʤ褦
ʤäƤ롣
.PP
ե̾ˤ \f(CW%h\fR פȤ롣ϥۥ̾û̷
Ƥ롣ȤСޥΥۥ̾ \*(L"xerxes\*(R" ΤȤ
.PP
\&\f(CW\*(C`#include /etc/sudoers.%h\*(C'\fR
.PP
Ƚ񤱤С\fBsudo\fR ϥե \fI/etc/sudoers.xerxes\fR 򥤥󥯥롼
뤳Ȥˤʤ롣
.PP
\&\f(CW\*(C`#includedir\*(C'\fR ̿ȤС\fIsudo.d\fR ǥ쥯ȥ
äƤơƥΥѥåԤѥå򥤥󥹥ȡ뤹
\&\fIsudoers\fR Υ롼򵭤ե򤽤Ƥ롢ȤäȤ
ǽˤʤ롣ȤСΤ褦˽񤯤ȡ
.PP
\&\f(CW\*(C`#includedir /etc/sudoers.d\*(C'\fR
.PP
\&\fBsudo\fR  \fI/etc/sudoers.d\fR ˤեĤŤɤ߹ࡣ
 \f(CW\*(C`~\*(C'\fR äꡢ\f(CW\*(C`.\*(C'\fR ʸ
ޤǤꤹե̾ϥåפ뤬 ѥåޥ͡
ǥäƥݥեХååץեɤ߹褦
򵯤ʤǤ롣եϼ˥ȤơϤ롣
ʤ\fI/etc/sudoers.d/01_first\fR  \fI/etc/sudoers.d/10_second\fR
˲ϤȤȤȤϼǤäơͤνǤ
ʤΤǡ\fI/etc/sudoers.d/1_whoops\fR Ȥե뤬äƤ⡢
\&\fI/etc/sudoers.d/10_second\fR \fB\fRɤ뤳Ȥ
դƤۤե̾Ƭ 0 ƿη·С
򤹤뤳ȤǤ롣
.PP
դƤۤ\f(CW\*(C`#include\*(C'\fR ǥ󥯥롼ɤ줿
եȤϰä (: \fBvisudo\fR  \fI/etc/sudoers\fR 
ԽȤ\f(CW\*(C`#include\*(C'\fR ǻꤷե뤬С
³ƤԽ)
\&\fBvisudo\fR  \f(CW\*(C`#includedir\*(C'\fR ǻꤷǥ쥯ȥ
եޤԽΤϡ󥿥顼ޤΤȤǤ롣
Ȥϸ\fBvisudo\fR  \f(CW\*(C`\-f\*(C'\fR ץդǼ¹Ԥơ
ǥ쥯ȥΥեľԽ뤳Ȥϲǽ
.Sh "ۤüʸͽ"
.IX Subsection "Other special characters and reserved words"
ѥɵ ('#') ϥȤ򼨤Τ˻Ѥ (㳰ϡ#include ̿
ǤȤ䡢桼̾˴ϢƸ졢θ˰İʾο
³ȤǤꡢԤξ uid ȸʤ)ȵ
³ƥȤϡˤޤ̵뤵롣
.PP
ͽ \fB\s-1ALL\s0\fR ȹߤΥꥢǤꡢФƤǤ
ޥå롣\fB\s-1ALL\s0\fR ϡ\f(CW\*(C`Cmnd_Alias\*(C'\fR,
\&\f(CW\*(C`User_Alias\*(C'\fR, \f(CW\*(C`Runas_Alias\*(C'\fR,
\&\f(CW\*(C`Host_Alias\*(C'\fR ˻ȤȤʤ顢ɤǤ
ѤǤ롣\fB\s-1ALL\s0\fR Ȥ̾Υꥢʬ褦
ƤϤʤȹߤΥꥢʬǺäꥢ
ͥ褷ƻȤ뤫\fB\s-1ALL\s0\fR λѤˤϴȼȤ
Τ˺ʤǤʤʤ顢\fB\s-1ALL\s0\fR 
ޥɤ˴ؤƻȤȡ桼˥ƥ\fBɤ\fRޥɤǤ
¹Ԥ뤳ȤƤޤǤ롣
.PP
᡼ޡ ('!') ϡꥢǤ 
\&\f(CW\*(C`Cmnd\*(C'\fR Ǥ \fInot\fR 黻ҤȤƻѤǤ롣
ˤäƤͤ뤳Ȥǽʤ顢
ȹߥꥢ \f(CW\*(C`ALL\*(C'\fR  \f(CW\*(C`!\*(C'\fR 
Ȥ߹碌ơ󻰤ΥޥɰʳΤ٤ƤΡץޥɤμ¹Ԥ򤢤桼
Ĥ褦ȤƤ⡢פɤưˤʤ뤳ȤϤäˤʤȤ
դƤۤ (Ρ֥ƥ˴ؤפ򻲾)
.PP
ĹԤϡ˥Хåå ('\e') ֤С³뤳ȤǤ롣
.PP
ꥹȤˤǴ֤桼ˤ빽ʸüʸ 
('=', ':', '(', ')') ˶ʸ (whitespace)뤳Ȥϡ
ǤդǤ롣
.PP
ʸñ (桼̾Ȥۥ̾Ȥ) ΰȤƻȤȤϡ
Хåå ('\e') ǥפʤФʤʤ
\&'@', '!', '=', ':', ',', '(', ')', '\e' Ǥ롣
.SH "SUDOERS Υץ"
.IX Header "SUDOERS OPTIONS"
Ǥ褦ˡ\fBsudo\fR ư 
\&\f(CW\*(C`Default_Entry\*(C'\fR Ԥˤäѹ뤳ȤǤ롣
Defaults Ϳ뤳ȤΤǤѥ᡼ˤĤơݡȤƤ
ΤΤ٤Ƥ򡢥̤ˤޤȤưʲ󤹤롣
.PP
\&\fBե饰\fR:
.IP "always_set_home" 16
.IX Item "always_set_home"
򥻥åȤȡ\fBsudo\fR ϴĶѿ \f(CW\*(C`HOME\*(C'\fR 
ѿоݥ桼Υۡǥ쥯ȥꤹ (\fB\-u\fR ץ
Ѥʤꡢ root Ǥ)¾塢ۤΤ \fBsudo\fR 
\&\fB\-H\fR ץ󤬾˻ꤵ뤳Ȥˤʤ櫓Υե饰
ǥեȤǤ \fIoff\fR Ǥ롣
.IP "authenticate" 16
.IX Item "authenticate"
򥻥åȤȡ桼ϥޥɤμ¹ԤĤˡѥɤ
(뤤ϡۤǧˡ) ǧڤ򤷤ʤФʤʤΥǥեͤ
\&\f(CW\*(C`PASSWD\*(C'\fR  \f(CW\*(C`NOPASSWD\*(C'\fR ѹǤ롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.IP "closefrom_override" 16
.IX Item "closefrom_override"
򥻥åȤȡ桼 \fBsudo\fR  \fB\-C\fR ץ
ѤǤ褦ˤʤ롣\fB\-C\fR ץȤΤϡ\fBsudo\fR 
եĤƤȤɤΥե롦ǥץ
ƤȤǥեȤλѹΤΥե饰
ǥեȤǤ \fIoff\fR Ǥ롣
.IP "env_editor" 16
.IX Item "env_editor"
򥻥åȤȡ\fBvisudo\fR ϥǥեȤΥǥꥹȤ
ѤˡĶѿ \s-1EDITOR\s0  \s-1VISUAL\s0 ͤ
Ѥ褦ˤʤ롣줬ƥۡˤʤ꤫ͤʤȤ
դƤۤ桼 root ȤǤդΥޥɤ˵Ͽ뤳Ȥʤ
¹ԤǤ褦ˤʤ뤫ĶѿѤȤΡ
\&\fIenv_editor\fR ͭˤˡϡ
\&\fIsudoers\fR ե \f(CW\*(C`editor\*(C'\fR ץ
ǶڤäǥΥꥹȤ񤤤ƤȤС
\&\fBvisudo\fR  \s-1EDITOR\s0  \s-1VISUAL\s0 ȤΤϡ
줬 \f(CW\*(C`editor\*(C'\fR ץ˻ꤷͤȥޥåȤ
ʤ롣Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "env_reset" 16
.IX Item "env_reset"
򥻥åȤȡ\fBsudo\fR ϴĶʲѿΤߤޤ褦
ꤷľʤ\s-1LOGNAME\s0, \s-1SHELL\s0, \s-1USER\s0,
\&\s-1USERNAME\s0  \f(CW\*(C`SUDO_*\*(C'\fR Ǥ롣θ
ˡ\fBsudo\fR ư桼δĶˤѿΤ
\&\f(CW\*(C`env_keep\*(C'\fR  \f(CW\*(C`env_check\*(C'\fR ΥꥹȤ
ޥåΤɲä롣 \f(CW\*(C`env_keep\*(C'\fR  
\&\f(CW\*(C`env_check\*(C'\fR ΥꥹȤ˥ǥեȤǤɤѿ
ޤޤƤ뤫ϡroot 桼 \fBsudo\fR  \fI\-V\fR ץդ
¹ԤС뤳ȤǤ롣ʤ\fIsudoers\fR ե
\&\fIsecure_path\fR ץꤵƤȤϡͤ
Ķѿ \f(CW\*(C`PATH\*(C'\fR ȤƻѤ뤳Ȥˤʤ롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.IP "fqdn" 16
.IX Item "fqdn"
\&\fIsudoers\fR եǴۥ̾Ѥä顢
Υե饰򥻥åȤȤ褤ʤmyhost ǤϤʤ
myhost.mydomain.edu ȤΤȤǤ⡢С
û̷Ȥ (ξ򺮤ƻȤȤäƤǤ)դ
ۤΤϡ\fIfqdn\fR  ͭˤȡ\fBsudo\fR  \s-1DNS\s0 
䤤碌򤷤ʤФʤʤΤǡ\s-1DNS\s0 ӥ
ƯƤʤ硢\fBsudo\fR Ȥʤʤ뤫⤷ʤȤȤ
(ȤСޥ󤬥ͥåȥ³Ƥʤ)
⤦ĵդ٤Ȥ롣
\&\s-1DNS\s0 ΤäƤۥȤ̾ȤʤФʤʤȤȤ
СۥȤΥꥢ (\f(CW\*(C`CNAME\*(C'\fR Υȥ) 
ȤäƤϤʤѥեޥ󥹤⤢뤷\s-1DNS\s0 饨ꥢ
٤ƼˡϤʤǤ⤢롣ޥΥۥ̾ 
\&(\f(CW\*(C`hostname\*(C'\fR ޥɤ֤äƤΤ) Ǥ
̾ˤʤäƤʤС\fIfqdn\fR 򥻥åȤɬפϤʤ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "ignore_dot" 16
.IX Item "ignore_dot"
򥻥åȤȡĶѿ \f(CW\*(C`PATH\*(C'\fR  '.'  ''
(ȥǥ쥯ȥ) äƤ⡢\fBsudo\fR Ϥ̵뤹롣
\&\f(CW\*(C`PATH\*(C'\fR ΤΤѹʤΥե饰
ǥեȤǤ \fIoff\fR Ǥ롣
.IP "ignore_local_sudoers" 16
.IX Item "ignore_local_sudoers"
\&\s-1LDAP\s0 ǤΥե饰򥻥åȤȡ\fI/etc/sudoers\fR 
Ϥåפ롣Υե饰ϡˤ sudoers ե
Ѥؤơ\s-1LDAP\s0 ΤߤȤ褦ˤȤΤˤ롣
ΰڥ졼 \fI/etc/sudoers\fR ˼äƼʬθ¤
䤽ȤƤ⡢ߤ˻ߤ櫓Υץ
ꤵƤȤϡ\fI/etc/sudoers\fR ե¸ߤɬפʤ
Υץϡޥå \s-1LDAP\s0 ζŪʥȥ꤬
ĤʤäȤˡɤ񤦤٤ \fBsudo\fR ˻ؼΤ顢
ꤷ sudoOption  \f(CW\*(C`cn=defaults\*(C'\fR Υ
ʤа̣ʤΥե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "insults" 16
.IX Item "insults"
򥻥åȤȡʥѥɤϤ줿Ȥ
\&\fBsudo\fR 桼˰֤ĤΥե饰ϥǥեȤǤ \fIoff\fR
Ǥ롣
.IP "log_host" 16
.IX Item "log_host"
򥻥åȤȡۥ̾ (syslog ͳǤϤʤ) \fBsudo\fR 
ե˵Ͽ뤳Ȥˤʤ롣Υե饰ϥǥեȤǤ \fIoff\fR
Ǥ롣
.IP "log_year" 16
.IX Item "log_year"
򥻥åȤȡͷǯ (syslog ͳǤϤʤ) \fBsudo\fR 
ե˵뤳Ȥˤʤ롣Υե饰ϥǥեȤǤ \fIoff\fR 
Ǥ롣
.IP "long_otp_prompt" 16
.IX Item "long_otp_prompt"
\&\fBS/Key\fR  \fB\s-1OPIE\s0\fR Τ褦 One Time Password
(\s-1OTP\s0) ѤƤȤˤͭˤȡ󥸤
륦ɥ˥åȡɡڡȤ䤹褦ˡ
ԤΥץץȤѤ롣ǥեȤΥץץȤۤɸɤϤ褯ʤ
Ȼפͤ⤤롣ǥեȤǤϤΥե饰 \fIoff\fR 
Ǥ롣
.IP "mail_always" 16
.IX Item "mail_always"
桼 \fBsudo\fR ¹Ԥ뤿Ӥˡ\fImailto\fR 桼˥᡼롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "mail_badpass" 16
.IX Item "mail_badpass"
\&\fBsudo\fR ¹Ԥ桼ѥɤϤʤȡ
\&\fImailto\fR 桼˥᡼롣Υե饰ϥǥեȤǤ 
\&\fIoff\fR Ǥ롣
.IP "mail_no_host" 16
.IX Item "mail_no_host"
򥻥åȤȡ\fBsudo\fR ư桼 \fIsudoers\fR ե
¸ߤΤΡΥۥȤǥޥɤμ¹ԤĤƤʤ硢
\&\fImailto\fR 桼˥᡼դ롣Υե饰ϥǥեȤǤ 
\&\fIoff\fR Ǥ롣
.IP "mail_no_perms" 16
.IX Item "mail_no_perms"
򥻥åȤȡ\fBsudo\fR ư桼 \fBsudo\fR λѤ
ĤƤ뤬¹Ԥ褦ȤƤ륳ޥɤ \fIsudoers\fR ե
Υ桼ΥȥϿƤʤŪ˶ػߤƤ硢
\&\fImailto\fR 桼˥᡼դ롣Υե饰ϥǥեȤǤ 
\&\fIoff\fR Ǥ롣
.IP "mail_no_user" 16
.IX Item "mail_no_user"
򥻥åȤȡ\fBsudo\fR ư桼 \fIsudoers\fR ե
ܤƤʤ硢\fImailto\fR 桼˥᡼դ롣
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.IP "noexec" 16
.IX Item "noexec"
򥻥åȤȡ\fBsudo\fR ̤Ƽ¹Ԥ뤹٤ƤΥޥɤ
\&\f(CW\*(C`EXEC\*(C'\fR ̵ˤʤꡢ 
\&\f(CW\*(C`NOEXEC\*(C'\fR ꤵƤ뤫ΤȤ񤦤褦ˤʤ롣
ҤΡ\fI\s-1NOEXEC\s0  \s-1EXEC\s0\fRפӡΥޥ˥奢
ˤ֥롦פɻߤפȤ
ȤƤۤΥե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "path_info" 16
.IX Item "path_info"
̾ \fBsudo\fR ϡĶѿ \f(CW\*(C`PATH\*(C'\fR ˥ޥɤ
դʤȡ桼ˤΤȤΤ餻롣ѤС
̥桼˥Τʤ¹ԥեΤ꤫ˤĤƾ
ǤȤͳ顢ư̵ˤȤ⤢뤫⤷ʤ
ξηϡ¹ԥե뤬ñ˥桼 \f(CW\*(C`PATH\*(C'\fR 
ʤäξǤ⡢¹ԤεĤʤ \fBsudo\fR 桼˹𤲤
Ȥˤʤäơ¾𤬤狼ˤ⤷ʤȤǤ롣Υե饰
ǥեȤǤ \fIon\fR Ǥ롣
.IP "passprompt_override" 16
.IX Item "passprompt_override"
̾\fIpassprompt\fR ץˤäƻꤵ줿ѥɥץץȤ
ѤΤϡ\s-1PAM\s0 Τ褦ʥƥबѰդƤ
ѥɥץץȤ \*(L"Password:\*(R" Ȥʸ˥ޥåƤ
ȤǤ롣\fIpassprompt_override\fR 򥻥åȤȡ
\&\fIpassprompt\fR ̵ǻȤ뤳Ȥˤʤ롣Υե饰
ǥեȤǤ \fIoff\fR Ǥ롣
.IP "preserve_groups" 16
.IX Item "preserve_groups"
ǥեȤǤϡ\fBsudo\fR Ͻ°롼פνͤȤơѿоݥ桼
°Ƥ륰롼פΥꥹȤꤹ롣 \fIpreserve_groups\fR 
åȤȡ\fBsudo\fR ¹Ԥ桼ν°롼פΥꥹȤ
ѹ줺ˤΤޤްݻ롣Ȥϸ¥롼 ID 
¸롼 ID ѿоݥ桼Τꤵ뤳ȤѤϤʤ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "pwfeedback" 16
.IX Item "pwfeedback"
ۤΤƤ Unix ץƱ͡\fBsudo\fR ϥѥɤ
ɤ߹ȤǥեȤǤϡ桼 Return (ޤ Enter) 
ޤǡ off ˤ롣ưˤȤޤɤ桼¸ߤ롣
ˤ \fBsudo\fR ޤȿʤʤä褦˸Τ
\&\fIpwfeedback\fR 򥻥åȤȡ桼򲡤Ӥˡ\fBsudo\fR 
ܤ˸ȿ֤褦ˤʤ롣ˤϡƥ꤬
뤳ȤդƤۤǸƤͤǤޤ줿ѥɤ
ʸꤹ뤳ȤǤ뤫⤷ʤΤΥե饰ϥǥեȤǤ
\&\fIoff\fR Ǥ롣
.IP "requiretty" 16
.IX Item "requiretty"
򥻥åȤȡ\fBsudo\fR ¹ԤΤϡ桼ºݤ tty 
󤷤Ȥˤʤ롣ʤ\fBsudo\fR ¹ԤǤΤϡ
󡦥å󤫤Ǥäơ
\&\fIcron\fR\|(8)  cgi-bin ץȤȤäۤˡ𤷤Ƽ¹Ԥ
ȤϤǤʤȤȤΥե饰ϡǥեȤǤ \fIoff\fR Ǥ롣
.IP "root_sudo" 16
.IX Item "root_sudo"
򥻥åȤȡroot  \fBsudo\fR ¹ԤǤ褦ˤʤ롣
Υե饰̵ˤȡ桼Ȥ \f(CW"sudo sudo /bin/sh"\fR 
ä褦 \fBsudo\fR ޥɤ\fBϢŪ\fRȤäơ롼ȥ
뤳ȤǤʤʤ롣Ȥǡ
\&\fIroot_sudo\fR  off ȡroot  \fBsudoedit\fR ޤǼ¹ԤǤʤʤ
ȤդƤۤ
\&\fIroot_sudo\fR ̵ˤƤ⡢ƥºݤ˸夹櫓ǤϤʤ
Υե饰¸ߤƤΤϡäѤŪͳʤΤ
Υե饰ϥǥեȤǤ \fIon\fR Ǥ롣
.IP "rootpw" 16
.IX Item "rootpw"
򥻥åȤȡ\fBsudo\fR ϥץץȤǡư桼
ѥɤǤϤʤroot Υѥɤ׵᤹褦ˤʤ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "runaspw" 16
.IX Item "runaspw"
򥻥åȤȡ\fBsudo\fR ϥץץȤǡư桼
ѥɤǤϤʤ\fIsudoers\fR ե \fIrunas_default\fR ץ
Ƥ桼 (ǥեȤǤ \f(CW\*(C`root\*(C'\fR Ǥ)
ѥɤ׵᤹롣Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "set_home" 16
.IX Item "set_home"
줬åȤƤȤ\fBsudo\fR  \fB\-s\fR ץդ
ưȡĶѿ \f(CW\*(C`HOME\*(C'\fR ѿоݥ桼 
(\fB\-u\fR ץ󤬻Ѥʤꡢ root Ǥ)
ۡǥ쥯ȥꤵ롣ʤ \fB\-s\fR ץ
\&\fB\-H\fR ץ¾ͤ뤳Ȥˤʤ櫓Υե饰
ǥեȤǤ \fIoff\fR Ǥ롣
.IP "set_logname" 16
.IX Item "set_logname"
̾ \fBsudo\fR ϴĶѿ \f(CW\*(C`LOGNAME\*(C'\fR,
\&\f(CW\*(C`USER\*(C'\fR, \f(CW\*(C`USERNAME\*(C'\fR 
ѿоݥ桼̾ (\fB-u\fR ץ󤬻ꤵƤʤ硢
̤ root) ˥åȤ롣ץˤäƤ (ȤС
\&\s-1RCS\s0 ӥ󥳥ȥ륷ƥबΰĤ) 桼
ºݤˤïǤ뤫ȽꤹΤ \f(CW\*(C`LOGNAME\*(C'\fR 
ѤƤ뤳ȤΤǡο񤤤ѹ뤳Ȥ˾ޤ⤢롣
set_logname ץ '!' դꤹ뤳Ȥǡ줬Ǥ롣
ʤ \fIenv_reset\fR ץ̵ˤƤʤ硢
\&\fIenv_keep\fR ꥹȤιܤ \fIset_logname\fR ˤͤ
񤭤뤳ȤˤʤΤǡդƤۤΥե饰ϥǥեȤǤ 
\&\fIon\fR Ǥ롣
.IP "setenv" 16
.IX Item "setenv"
򥻥åȤȡ桼ޥɥ饤󤫤 \fIenv_reset\fR ץ
̵ˤǤ褦ˤʤ롣ˡޥɥ饤󤫤ꤹĶѿ 
\&\fIenv_check\fR, \fIenv_delete\fR, \fIenv_keep\fR ˤ¤
ʤʤ롣ΡΤ褦ʤѿꤹ뤳Ȥ
ĤΤϡѤǤ桼Τߤ˸¤٤Υե饰
ǥեȤǤ \fIoff\fR Ǥ롣
.IP "shell_noargs" 16
.IX Item "shell_noargs"
줬åȤƤȤ\fBsudo\fR ʤǵưȡ
\&\fBsudo\fR  \fB\-s\fR ץ󤬻ꤵ줿Τ褦˿񤦡
ʤroot 桼Ȥƥ¹Ԥ櫓 (ϡ
Ķѿ \f(CW\*(C`SHELL\*(C'\fR åȤƤСˤäƷޤ뤷
åȤƤʤС\fBsudo\fR ư桼 /etc/passwd ȥ
Ͽ줿Τˤʤ)Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "fast_glob" 16
.IX Item "fast_glob"
̾ \fBsudo\fR ϥѥ̾Υޥå󥰤򤹤Ȥ\fIglob\fR\|(3) ؿ
Ѥơ롦Υ磻ɥŸ (glob) Ԥ
\&\fIglob\fR\|(3) ϥե륷ƥ˥Τǡѥ
äƤϡȤλޤǤ˻֤뤳Ȥ롣
ɬפʻ˥ޥȤ褦ˤʤäƤ (ĤޤꥪȥޥȤ)
ͥåȥե롦ƥ򻲾ȤȤϡȤ櫓֤롣
\&\fIfast_glob\fR ץꤹȡ\fBsudo\fR 
\&\fIfnmatch\fR\|(3) ؿȤ褦ˤʤ뤬δؿϥޥå󥰤κݤ
ե륷ƥ˥ʤ\fIfast_glob\fR ηϡ
\&\fI./ls\fR  \fI../bin/ls\fR Τ褦ХѥФޥå
ǤʤȤǤ롣Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "stay_setuid" 16
.IX Item "stay_setuid"
̾ \fBsudo\fR ޥɤ¹ԤȤ UID ȼ¸ UID 
ѿоݥ桼 (ǥեȤǤ root) ΤΤ˥åȤ롣Υץ
ο񤤤ѹơ\fBsudo\fR ư桼 \s-1UID\s0 
Τޤ޼ \s-1UID\s0 ȤƻĤ褦ˤ롣ȡ\fBsudo\fR  
setuid åѡȤư褦ˤʤ櫓ץ setuid 
ưȡ⤿餷ͤʤȤͳ顢εǽ
Ȥʤ褦ˤƤ륷ƥǤϡΥץΩĤ⤷ʤ
Υץϡ \fIsetreuid()\fR ؿʤ \fIsetresuid()\fR ؿʤ
äƤ륷ƥǤΤͭǤ롣
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "targetpw" 16
.IX Item "targetpw"
򥻥åȤȡ\fBsudo\fR ϥץץȤǡư桼Υѥ
ǤϤʤ\fB\-u\fR ץǻꤵ줿桼 (ǥեȤǤ root)  
ѥɤ׵᤹롣򤹤ȡ\fB\-u\fR ץΰȤơ
passwd ǡ١ϿƤʤ uid Ȥʤʤ뤳ȤդƤۤ
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.IP "tty_tickets" 16
.IX Item "tty_tickets"
򥻥åȤȡ桼 tty Ȥǧڤ򤷤ʤФʤʤʤ롣
\&\fBsudo\fR ̾åȥǥ쥯ȥ (Ȥ 
/var/run/sudo) ˤ롢\fBsudo\fR ¹ԤƤ桼Ʊ̾Υǥ
쥯ȥǧڤ˻Ѥ롣Υե饰ͭˤʤäƤϡ
Υǥ쥯ȥˤ롢桼󤷤Ƥ tty б̾
եѤ뤳ȤˤʤΤΥե饰ϥǥեȤǤ \fIoff\fR 
Ǥ롣
.IP "umask_override" 16
.IX Item "umask_override"
򥻥åȤȡ\fBsudo\fR  umask  \fIsudoers\fR 
umask ץǻꤵ줿Ȥͤˡѹä뤳Ȥʤꤹ롣
ΤȤˤäơ桼Ȥ umask ͤäȴˤ䤫 umask ͤ
\&\fIsudoers\fR ǻꤹ뤳Ȥǽˤʤ롣\fBsudo\fR Τư
Ʊˤʤ櫓
\&\fIumask_override\fR 򥻥åȤʤ硢ߤ \fBsudo\fR  umask 
桼 umask ͤ \fIsudoers\fR ǻꤷ umask ͤȤΥӥå¤
ꤹ뤳ȤˤʤäƤ롣Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.\" .IP "use_loginclass" 16
.\" .IX Item "use_loginclass"
.\" If set, \fBsudo\fR will apply the defaults specified for the target user's
.\" login class if one exists.  Only available if \fBsudo\fR is configured with
.\" the \-\-with\-logincap option.  This flag is \fIoff\fR by default.
.\" 򥻥åȤȡ\fBsudo\fR ϡѿоݥ桼Υ󥯥饹¸
.\" ߤʤСФƻꤵ줿ǥեȤͤȤȤˤʤ롣
.\" Υե饰ϡ\fBsudo\fR  \-\-with\-logincap ץդ 
.\" configure ȤΤѤ뤳ȤǤ롣Υե饰ϥǥեȤǤ 
.\" \&\fIoff\fR Ǥ롣
.IP "visiblepw" 16
.IX Item "visiblepw"
ǥեȤǤϡ桼ѥɤϤʤФʤʤȤˡ
ѤƤ륿ߥʥǥǤʤä顢
\&\fBsudo\fR ϼ¹Ԥݤ褦ˤʤäƤ롣Ф
\&\fIvisiblepw\fR ե饰ꤵƤȡѥɤ꡼
ɽƤޤǤ⡢\fBsudo\fR ϥץץȤФơѥɤ
롣ưˤäơ
\&\fIrsh\fR\|(1)  tty Ƥʤˤ⤫餺
\&\f(CW"rsh somehost sudo ls"\fR Ȥäμ¹Ԥǽˤʤ櫓
Υե饰ϥǥեȤǤ \fIoff\fR Ǥ롣
.PP
\&\fB\fR:
.IP "closefrom" 16
.IX Item "closefrom"
\&\fBsudo\fR ϥޥɤ¹Ԥˡɸϡɸϡɸ२顼
(ʤեǥץ 0\-2 Ǥ) ơ
ץ󤷤٤ƤΥե롦ǥץ򥯥롣
\&\fIclosefrom\fR ץѤȡ0\-2 ʳ
ɤΥե롦ǥץ饯ƹԤꤹ뤳ȤǤ롣
ǥեȤ \f(CW3\fR Ǥ롣
.IP "passwd_tries" 16
.IX Item "passwd_tries"
\&\fBsudo\fR ּԡפ˵Ͽƽλˡ桼ѥɤ
ϤǤǥեȤ \f(CW\*(C`3\*(C'\fR
.PP
\&\fBͤȤƤѤǤ\fR:
.IP "loglinelen" 16
.IX Item "loglinelen"
\&\fBsudo\fR ѥեΰԤʸͤϡե
䤹뤿˲Ԥ֤Τ˻Ѥ롣ͤϡ
syslog ͳΥեˤϱƶľܥե˥񤭽ФȤΤ
̤롣ǥեȤ \f(CW\*(C`80\*(C'\fR Ǥ (Ԥ򤷤ʤ褦
ˤϡͤ 0 ˤ뤫Ƭ '!' դơΥץꤹ)
.IP "passwd_timeout" 16
.IX Item "passwd_timeout"
\&\fBsudo\fR ΥѥɥץץȤڤˤʤޤǤʬñ̤λ֡
ǥեȤ \f(CW\*(C`5\*(C'\fR Ǥ롣 \f(CW0\fR ˥åȤ
ȡѥɥץץȤڤʤˤʤ롣
.IP "timestamp_timeout" 16
.IX Item "timestamp_timeout"
\&\fBsudo\fR ѥɤƤ׵᤹褦ˤʤޤǤλ֤ʬñ̤
ꤹ롣ǥեȤǤ \f(CW\*(C`5\*(C'\fR Ǥ롣 \f(CW0\fR 
åȤȡѥɤ׵᤹褦ˤʤ롣\f(CW0\fR 꾮ͤ
åȤϡ桼Υॹפڤˤʤ뤳Ȥʤ
桼 \f(CW\*(C`sudo \-v\*(C'\fR  \f(CW\*(C`sudo \-k\*(C'\fR 
¹Ԥ뤳ȤˤäơॹפʬǺäꡢäǤ褦
ä顢μȤФ褤
.IP "umask" 16
.IX Item "umask"
ޥɤ¹ԤƤȤ˻Ѥ umask ͡桼 umask ͤ򤽤Τޤ
Ȥä顢'!' ƬդơΥץꤹ뤫0777 
åȤ롣Υץͤ 0777 ʳξ硢ºݤ˻Ѥ
umask ͤϡ桼 umask ͤ umask ץǻꤹ umask ͤȤ
ӥå¤ˤʤ롣ΤȤˤäơ\fBsudo\fR ޥɤ¹ԤȤ
umask ͤ桼 umask ͤ㤯ʤʤ褦ˤʤäƤ櫓
ʤumask ץΥǥեȤͤϡ\f(CW\*(C`0022\*(C'\fR Ǥ롣
\&\s-1PAM\s0 ѤƤ륷ƥǤϡ \s-1PAM\s0 Υǥե
umask ͤꤹ뤳ȤǤ뤬ξϡ줬 \fIsudoers\fR 
ꤷͤ񤭤뤳ȤդƤۤ
.PP
\&\fBʸ\fR:
.IP "badpass_message" 16
.IX Item "badpass_message"
桼ʥѥɤϤȤɽå
\&\fIinsults\fR ե饰ͭˤʤäƤʤꡢǥեȤ
\f(CW\*(C`Sorry, try again.\*(C'\fRפǤ롣
.IP "editor" 16
.IX Item "editor"
\&\fBvisudo\fR ǻѤǤ륨ǥ򥳥 (':') Ƕڤäꥹȡ
\&\fBvisudo\fR ϡǽʤС桼 \s-1EDITOR\s0 ĶѿȰפ
ǥ򤹤롣줬ǤʤȤϡΥꥹȤˤ륨ǥǡ
ºݤ¸ߤļ¹ԲǽʺǽΥǥѤ롣ǥեȤϻ
ƥˤ vi ΥѥǤ롣
.IP "mailsub" 16
.IX Item "mailsub"
\&\fImailto\fR 桼դ᡼η̾ʸ \f(CW%h\fR 
ϥޥΥۥ̾Ÿ롣ǥեȤϡ\f(CW\*(C`*** SECURITY
information for %h ***\*(C'\fRס
.IP "noexec_file" 16
.IX Item "noexec_file"
饤֥ؿ \fIexecv()\fR, \&\fIexecve()\fR, \fIfexecve()\fR 
ߡ (顼֤δؿ) äƤ붦ͭ饤֥Υѥ
ϡ\f(CW\*(C`LD_PRELOAD\*(C'\fR 䤽Τ
ݡȤƤ륷ƥ \fInoexec\fR ǽ¸뤿˻Ѥ롣
ǥեȤǤ \fI/usr/local/libexec/sudo_noexec.so\fR ˤʤäƤ롣
.IP "passprompt" 16
.IX Item "passprompt"
ѥɤ׵᤹Ȥ˻ѤǥեȤΥץץȡ\fB-p\fR 
ץĶѿ \f(CW\*(C`SUDO_PROMPT\*(C'\fR ˤäѹ뤳
Ǥ롣ʲΥѡ (`\f(CW\*(C`%\*(C'\fR') פѤ
롣
.RS 16
.ie n .IP "%H" 4
.el .IP "\f(CW%H\fR" 4
.IX Item "%H"
ɥᥤ̾դΥۥ̾Ÿ (ޥΥۥ̾̾
\&\fIfqdn\fR ץ󤬥åȤƤͭ)
.ie n .IP "%h" 4
.el .IP "\f(CW%h\fR" 4
.IX Item "%h"
ɥᥤ̾ʤΥۥ̾Ÿ
.ie n .IP "%p" 4
.el .IP "\f(CW%p\fR" 4
.IX Item "%p"
ѥɤ׵ᤵƤ桼̾Ÿ (\fIsudoers\fR ե 
\&\fIrootpw\fR, \fItargetpw\fR, \fIrunaspw\fR ե饰ºŤ)
.ie n .IP "%U" 4
.el .IP "\f(CW%U\fR" 4
.IX Item "%U"
ѿоݥ桼 (ǥեȤǤ root) ̾Ÿ
.ie n .IP "%u" 4
.el .IP "\f(CW%u\fR" 4
.IX Item "%u"
\&\fBsudo\fR ư桼Υ̾Ÿ
.ie n .IP "\*(C`%%\*(C'" 4
.el .IP "\f(CW\*(C`%%\*(C'\fR" 4
.IX Item "%%"
Ϣ³Ĥ \f(CW\*(C`%\*(C'\fR ϡĤ \f(CW\*(C`%\*(C'\fR ʸ
ΤΤ̣
.RE
.RS 16
.Sp
ǥեȤͤϡ\f(CW\*(C`Password:\*(C'\fRפǤ롣
.RE
.\" .IP "role" 16
.\" .IX Item "role"
.\" The default SELinux role to use when constructing a new security
.\" context to run the command.  The default role may be overridden on
.\" a per-command basis in \fIsudoers\fR or via command line options.
.\" This option is only available whe \fBsudo\fR is built with SELinux support.
.\" ޥɤ¹Ԥ뤿 SELinux οƥƥȤ
.\" ȤѤǥեȤΥ롣ǥեȤΥϡ
.\" \&\fIsudoers\fR ե䡢ޥɥ饤󥪥ץȤäơޥ
.\" Ȥѹ뤳ȤǤ롣ΥץѤǤΤϡ\fBsudo\fR 
.\"  SELinux ݡȤĤǺ줿ȤǤ롣
.IP "runas_default" 16
.IX Item "runas_default"
ޥɥ饤 \fB-u\fR ץ󤬻ꤵƤʤȤΡǥեȤ
ѿоݥ桼ǥեȤǤ \f(CW\*(C`root\*(C'\fR ˤʤäƤ롣
\fIrunas_default\fR 򥻥åȤʤ顢\f(CW\*(C`Runas_Alias\*(C'\fR 
ꤹˤʤФʤʤȤդ뤳ȡ
.IP "syslog_badpri" 16
.IX Item "syslog_badpri"
桼ǧڤ˼ԤȤ˻Ѥ syslog ͥ (priority)
եȤǤ \f(CW\*(C`alert\*(C'\fR ˤʤäƤ롣
.IP "syslog_goodpri" 16
.IX Item "syslog_goodpri"
桼ǧڤȤ˻Ѥ syslog ͥ (priority)
եȤǤ \f(CW\*(C`notice\*(C'\fR ˤʤäƤ롣
.IP "sudoers_locale" 16
.IX Item "sudoers_locale"
sudoers եϤȤ˻Ѥ롣ѹϡ
sudoers β˱ƶ뤫⤷ʤΤǡդƤۤ
ǥեȤǤ \f(CW"C"\fR ˤʤäƤ롣
.IP "timestampdir" 16
.IX Item "timestampdir"
\&\fBsudo\fR ॹסե֤ǥ쥯ȥꡣǥե
 \fI/var/run/sudo\fR Ǥ롣
.IP "timestampowner" 16
.IX Item "timestampowner"
ॹסǥ쥯ȥȤ֤륿ॹפνͭԡ
եȤ \f(CW\*(C`root\*(C'\fR Ǥ롣
.\" .IP "type" 16
.\" .IX Item "type"
.\" The default SELinux type to use when constructing a new security
.\" context to run the command.  The default type may be overridden on
.\" a per-command basis in \fIsudoers\fR or via command line options.
.\" This option is only available whe \fBsudo\fR is built with SELinux support.
.\" ޥɤ¹Ԥ뤿 SELinux οƥƥȤ
.\" ȤѤǥեȤΥסǥեȤΥפϡ
.\" \&\fIsudoers\fR ե䡢ޥɥ饤󥪥ץȤäơޥ
.\" Ȥѹ뤳ȤǤ롣ΥץѤǤΤϡ\fBsudo\fR 
.\"  SELinux ݡȤĤǺ줿ȤǤ롣
.PP
\&\fBͤȤƤѤǤʸ\fR:
.IP "askpass" 12
.IX Item "askpass"
\&\fIaskpass\fR ǻꤹΤϡإѡץХѥǤ롣
ΥإѡץϡߥʥѤǤʤȤˡ
桼Υѥɤɤ߹ि˻Ѥ롣ȤС\fBsudo\fR 
(ƥȥ١ǤϤʤ) եʥץꥱ󤫤¹Ԥ
Ȥä\fIaskpass\fR ǻꤵ줿إѡץϡ
Ϥ줿ץץȤȤɽ桼ΥѥɤɸϤ
񤭽Ф٤Ǥ롣
\&\fIaskpass\fR ͤϡĶѿ \f(CW\*(C`SUDO_ASKPASS\*(C'\fR 
񤭤뤳ȤǤ롣
.IP "env_file" 12
.IX Item "env_file"
\&\fIenv_file\fR ץǥեХѥꤹȡ
¹ԤץδĶȤꤹѿ򤽤Υե˳Ǽ
ȤǤ롣ΥեΥȥ \f(CW\*(C`VARIABLE=value\*(C'\fR
 \f(CW\*(C`export VARIABLE=value\*(C'\fR ηǤʤФʤʤ
ѿͤ򥷥󥰥륯Ȥ֥륯ȤǰϤǤ褤
Υե˴ޤޤѿϡ\fIenv_keep\fR  \fIenv_check\fR Τ褦
\&\fBsudo\fR ΤۤδĶαƶ롣
.IP "exempt_group" 12
.IX Item "exempt_group"
Υ롼פΥ桼ϥѥɤϤ \fIsecure_path\fR ˤ
\&\s-1PATH\s0 θȽƤ롣ΥץϥǥեȤǤ
åȤƤʤ
.IP "lecture" 12
.IX Item "lecture"
\&\fBsudo\fR ϥѥɥץץȤźƴñʷɽ뤳Ȥ
Ǥ롣ΥץϤη򤤤ɽ뤫ꤹ롣ʲͤ
ǽǤ롣
.RS 12
.IP "always" 8
.IX Item "always"
ĤǤɬɽ
.IP "never" 8
.IX Item "never"
ɽʤ
.IP "once" 8
.IX Item "once"
桼Ϥ \fBsudo\fR ¹ԤȤɽ롣
.RE
.RS 12
.Sp
ͤꤷʤȡ\fIonce\fR ꤷȤˤʤ롣Ƭ '!' դơ
Υץꤹȡͤ \fInever\fR Ѥ롣
ǥեȤͤ \fIonce\fR Ǥ롣
.RE
.IP "lecture_file" 12
.IX Item "lecture_file"
ɸη˻Ѥ \fBsudo\fR η񤭹ե뤬ʤ顢
\&\fIlecture_file\fR ǤΥѥꤹ롣\fBsudo\fR ϥǥեȤǤϡ
ץޤ줿Ѥ롣
.IP "listpw" 12
.IX Item "listpw"
Υץϡ\fBsudo\fB \fB\ -l\fR ץդǼ¹ԤȤ
桼ѥɤ׵ᤵΤϡɤʾ礫ꤹ롣
ʲΤ褦ͤǽǤ롣
.RS 12
.IP "all" 8
.IX Item "all"
ѥɤϤʤǤिˤϡ\fIsudoers\fR եλ
ۥȤФ桼ΥȥΤ٤Ƥ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ꤵƤʤФʤʤ
.IP "always" 8
.IX Item "always"
桼 \fB\-l\fR ץѤݤɬѥɤϤʤ
ʤʤ
.IP "any" 8
.IX Item "any"
ѥɤϤʤǤिˤϡ\fIsudoers\fR եλ
ۥȤФ桼ΥȥξʤȤĤ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ꤵƤʤФʤʤ
.IP "never" 8
.IX Item "never"
桼 \fB\-l\fR ץѤݤ˥ѥɤϤɬפ
ޤäʤ
.RE
.RS 12
.Sp
ͤꤷʤȡͤ \fIany\fR ȸʤ롣'!' Ƭդơ
Υץꤹȡͤ \fInever\fR Ȥ뤳Ȥˤʤ롣
ǥեȤ \fIany\fR Ǥ롣
.RE
.IP "logfile" 12
.IX Item "logfile"
\&\fBsudo\fR ΥեΥѥ (syslog ͳΥեǤϤʤ)
ѥꤹȡեؤΥ󥰤 on ˤʤꡢ '!' Ƭդơ
Υץꤹȡoff ˤʤ롣ǥեȤǤϡ\fBsudo\fR  
syslog ͳǥ롣
.IP "mailerflags" 12
.IX Item "mailerflags"
᡼ưȤ˻Ѥե饰ǥեȤ \fB\-t\fR 
ʤäƤ롣
.IP "mailerpath" 12
.IX Item "mailerpath"
ٹ᡼˻Ȥ᡼롦ץΥѥǥեȤ configure 
Ȥ˸Ĥä sendmail Υѥ
.IP "mailfrom" 12
.IX Item "mailfrom"
ٹ᡼䥨顼᡼ȤпͤȤƻѤ륢ɥ쥹
\&\fBsudo\fR  \f(CW\*(C`@\*(C'\fR ᤷʤ褦ˤ뤿ᡢ
ɥ쥹ϥ֥륯 (\f(CW\*(C`"\*(C'\fR) ǰϤ٤Ǥ롣
ǥեȤϡ\fBsudo\fR ¹Ԥ桼̾
.IP "mailto" 12
.IX Item "mailto"
ٹ᡼䥨顼᡼դ밸Υɥ쥹\fBsudo\fR  
\&\f(CW\*(C`@\*(C'\fR ᤷʤ褦ˤ뤿ᡢɥ쥹
֥륯 (\f(CW\*(C`"\*(C'\fR) ǰϤ٤Ǥ롣ǥեȤ root 
ʤäƤ롣
.IP "secure_path" 12
.IX Item "secure_path"
\&\fBsudo\fR ¹Ԥ뤢륳ޥɤѤѥ
\&\fBsudo\fR ¹Ԥ桼̵ʴĶѿ \f(CW\*(C`PATH\*(C'\fR 
ȤäƤ뤫ɤοƤʤʤ顢ΥץѤȤ褤
⤦Ĥλˡϡroot Υѥפȡְ̥桼Υѥפ̤ΤΤ
Ƥ桼 \fIexempt_group\fR ץǻꤷ
롼פ°ƤȡΥ桼 \fIsecure_path\fR αƶʤ
ΥץϡǥեȤǤϥåȤƤʤ
.IP "syslog" 12
.IX Item "syslog"
syslog ȤäƥäƤ syslog Υեƥ (syslog ͳ
ʤϡ'!' ƬդơΥץꤹ)
ǥեȤ \f(CW\*(C`local2\*(C'\fR ˤʤäƤ롣
.IP "verifypw" 12
.IX Item "verifypw"
Υץϡ\fBsudo\fR  \fB\-v\fR ץդǼ¹ԤȤ
桼ѥɤ׵ᤵΤϡɤʾ礫ꤹ롣Τ褦
ͤǽǤ롣
.RS 12
.IP "all" 8
.IX Item "all"
ѥɤϤʤǤिˤϡ\fIsudoers\fR եλ
ۥȤФ桼ΥȥΤ٤Ƥ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ꤵƤʤФʤʤ
.IP "always" 8
.IX Item "always"
桼 \fB\-v\fR ץѤݤɬѥɤϤʤ
ʤʤ
.IP "any" 8
.IX Item "any"
ѥɤϤʤǤिˤϡ\fIsudoers\fR եλ
ۥȤФ桼ΥȥξʤȤĤ 
\f(CW\*(C`NOPASSWD\*(C'\fR ꤵƤʤФʤʤ
.IP "never" 8
.IX Item "never"
桼 \fB\-v\fR ץѤݤ˥ѥɤϤɬפ
ޤäʤ
.RE
.RS 12
.Sp
ͤꤷʤȡͤ \fIall\fR ȸʤ롣'!' Ƭդơ
Υץꤹȡͤ \fInever\fR Ȥ뤳Ȥˤʤ롣
ǥեȤ \fIall\fR Ǥ롣
.RE
.PP
\&\fBͤȤƤѤǤꥹ\fR:
.IP "env_check" 16
.IX Item "env_check"
ѿͤ \f(CW\*(C`%\*(C'\fR  \f(CW\*(C`/\*(C'\fR ޤޤˡ
桼δĶĶѿ
εǽϡΤ褯ʤץ˸ printf ΥեޥåȤ
ȼн褹뤿ѤǤ롣Υץΰϡ
֥륯ȤǰϤޤ졢ڡǶڤ줿ꥹȤǤ褯
֥륯ȤʤñͤǤ褤ꥹȤϡ\f(CW\*(C`=\*(C'\fR,
\&\f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR, \f(CW\*(C`!\*(C'\fR 黻Ҥ
Ȥäơ줾֤ꡢɲäꡢꡢ̵ˤ
뤳ȤǤ롣\fIenv_check\fR ǻꤵ줿ѿϡ
\&\fIenv_reset\fR ץ̵ͭˤ餺嵭Υå
ѥСĶ¸뤳Ȥˤʤ롣åĶѿ
ǥեȤΥꥹȤϡroot 桼 \fBsudo\fR  \&\fI\-V\fR ץ
դƼ¹ԤȤɽ롣
.IP "env_delete" 16
.IX Item "env_delete"
\&\fIenv_reset\fR ץ̵ˤʤäƤȤˡ桼δĶ
ĶѿΥץΰϡ֥륯ȤǰϤޤ졢
ڡǶڤ줿ꥹȤǤ褯֥륯ȤʤñͤǤ褤
ꥹȤϡ\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR,
\&\f(CW\*(C`!\*(C'\fR 黻ҤȤäơ줾֤ꡢɲäꡢ
ꡢ̵ˤꤹ뤳ȤǤ롣Ķѿ
ǥեȤΥꥹȤϡroot 桼 \fBsudo\fR  \fI\-V\fR ץ
դƼ¹ԤȤɽ롣αդ٤ϡڥ졼ƥ󥰥ƥˤϡ
⤿餷ͤʤѿ򤤤ʤ setuid ץ (\fBsudo\fR 
ΰ) δĶȤˤƤΤ¿ȤȤǤ롣
.IP "env_keep" 16
.IX Item "env_keep"
\&\fIenv_reset\fR ץͭˤʤäƤȤǤ⡢桼δĶ
Τޤ¸ĶѿΥץˤäơ\fBsudo\fR 
߽ФץĶ򡢤٤椹뤳Ȥǽˤʤ롣
Υץΰϡ֥륯ȤǰϤޤ졢ڡǶڤ줿
ȤǤ褯֥륯ȤʤñͤǤ褤ꥹȤϡ
\&\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR,
\&\f(CW\*(C`!\*(C'\fR 黻ҤȤäơ줾֤ꡢ
ɲäꡢꡢ̵ˤꤹ뤳ȤǤ롣¸ѿ
ǥեȤΥꥹȤϡroot 桼 \fBsudo\fR  \fI\-V\fR ץ
դƼ¹ԤȤɽ롣
.PP
\fIsyslog\fR\|(3) ͳǥϿ硢\fBsudo\fR  syslog Υե
ƥ (facility: \fBsyslog\fR ѥ᡼) ȤƼͤ
롣\fBauthpriv\fR (\s-1OS\s0 ݡȤƤʤФ)
\&\fBauth\fR, \fBdaemon\fR, \fBuser\fR, \fBlocal0\fR, \fBlocal1\fR,
\&\fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR,
\&\fBlocal6\fR, \fBlocal7\fRsyslog ͥ (priority) ˤĤƤϡ
ΤΤбƤ롣\fBalert\fR, \fBcrit\fR, \fBdebug\fR,
\&\fBemerg\fR, \fBerr\fR, \fBinfo\fR, \fBnotice\fR, \fBwarning\fR
.SH "ե"
.IX Header "FILES"
.ie n .IP "\fI/etc/sudoers\fR" 24
.el .IP "\fI/etc/sudoers\fR" 24
.IX Item "/etc/sudoers"
ï¹ԤǤ뤫Υꥹ
.IP "\fI/etc/group\fR" 24
.IX Item "/etc/group"
Υ롼ץե
.IP "\fI/etc/netgroup\fR" 24
.IX Item "/etc/netgroup"
ͥåȥ롼פΥꥹ
.SH ""
.IX Header "EXAMPLES"
ʲ sudoers ȥθܤǤ롣ľʤȤ
Ťꤹʬ⤢롣ޤǽ˥ꥢ롣
.PP
.Vb 4
\& # User alias λ
\& User_Alias     FULLTIMERS = millert, mikef, dowdy
\& User_Alias     PARTTIMERS = bostley, jwfox, crawl
\& User_Alias     WEBMASTERS = will, wendy, wim
\&
\& # Runas alias λ
\& Runas_Alias    OP = root, operator
\& Runas_Alias    DB = oracle, sybase
\& Runas_Alias    ADMINGRP = adm, oper
\&
\& # Host alias λ
\& Host_Alias     SPARC = bigtime, eclipse, moet, anchor :\e
\&                SGI = grolsch, dandelion, black :\e
\&                ALPHA = widget, thalamus, foobar :\e
\&                HPPA = boa, nag, python
\& Host_Alias     CUNETS = 128.138.0.0/255.255.0.0
\& Host_Alias     CSNETS = 128.138.243.0, 128.138.204.0/24, 128.138.242.0
\& Host_Alias     SERVERS = master, mail, www, ns
\& Host_Alias     CDROM = orion, perseus, hercules
\&
\& # Cmnd alias λ
\& Cmnd_Alias     DUMPS = /usr/bin/mt, /usr/sbin/dump, /usr/sbin/rdump,\e
\&                        /usr/sbin/restore, /usr/sbin/rrestore
\& Cmnd_Alias     KILL = /usr/bin/kill
\& Cmnd_Alias     PRINTING = /usr/sbin/lpc, /usr/bin/lprm
\& Cmnd_Alias     SHUTDOWN = /usr/sbin/shutdown
\& Cmnd_Alias     HALT = /usr/sbin/halt
\& Cmnd_Alias     REBOOT = /usr/sbin/reboot
\& Cmnd_Alias     SHELLS = /usr/bin/sh, /usr/bin/csh, /usr/bin/ksh, \e
\&                         /usr/local/bin/tcsh, /usr/bin/rsh, \e
\&                         /usr/local/bin/zsh
\& Cmnd_Alias     SU = /usr/bin/su
\& Cmnd_Alias     PAGERS = /usr/bin/more, /usr/bin/pg, /usr/bin/less
.Ve
.PP
ʲǤϡѥޤ줿ǥեͤΤĤѹƤ롣
\&\fBsudo\fR ˤ \fIsyslog\fR\|(3) ͳǥϿեƥˤ
٤Ƥξ \fIauth\fR Ѥե륿Υåդˤ 
\&\fBsudo\fR ηФʤ褦ˤ桼 \fBmillert\fR 
ѥɤϤʤǤ褤ޥɤ root ȤƼ¹ԤȤϡ
Ķѿ \f(CW\*(C`LOGNAME\*(C'\fR, \f(CW\*(C`USER\*(C'\fR,
\&\f(CW\*(C`USERNAME\*(C'\fR ѹʤˡ
\&\fI\s-1SERVERS\s0\fR Ȥ \f(CW\*(C`Host_Alias\*(C'\fR °
ޥǤϡʥեܤȤƺꡢε
ǯϤä¸ΤǡγƹԤ˴ְ㤤ʤǯ٤褦ˤ롣
Ǹ \s-1PAGERS\s0 Ȥ \f(CW\*(C`Cmnd_Alias\*(C'\fR °
ޥ (\fI/usr/bin/more\fR, \fI/usr/bin/pg\fR, \fI/usr/bin/less\fR) 
ˤĤƤϡ롦פ̵ˤ롣
.PP
.Vb 7
\& # built-in defaults ѹ
\& Defaults               syslog=auth
\& Defaults>root          !set_logname
\& Defaults:FULLTIMERS    !lecture
\& Defaults:millert       !authenticate
\& Defaults@SERVERS       log_year, logfile=/var/log/sudo.log
\& Defaults!PAGERS        noexec
.Ve
.PP
桼꤬ï¹ԤǤ뤫ºݤ˷Ƥʬ
.PP
.Vb 2
\& root           ALL = (ALL) ALL
\& %wheel         ALL = (ALL) ALL
.Ve
.PP
\&\fBroot\fR  \fBwheel\fR 롼פΤ٤ƤΥ桼ˤϡɤΥۥȤǤ
ǤդΥ桼ȤƤʤ륳ޥɤǤ¹Ԥ뤳Ȥǧ롣
.PP
.Vb 1
\& FULLTIMERS     ALL = NOPASSWD: ALL
.Ve
.PP
ե륿Υƥ (\fBmillert\fR, \fBmikef\fR, \fBdowdy\fR) 
ϡɤΥۥȤǤǤդΥޥɤǧڤʤǼ¹ԤǤ롣
.PP
.Vb 1
\& PARTTIMERS     ALL = ALL
.Ve
.PP
ѡȥΥƥ ((\fBbostley\fR, \fBjwfox\fR,
\&\fBcrawl\fR) ϡɤΥۥȤǤǤդΥޥɤ¹ԤǤ뤬
κݤǧڤ򤷤ʤФʤʤ (Υȥˤ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ꤵƤʤΤ)
.PP
.Vb 1
\& jack           CSNETS = ALL
.Ve
.PP
桼 \fBjack\fR ϡ\fI\s-1CSNETS\s0\fR Ȥꥢ°ޥ
ǤդΥޥɤ¹ԤǤ (ʤͥåȥ \f(CW128.138.243.0\fR,
\&\f(CW128.138.204.0\fR, \f(CW128.138.242.0\fR Υޥ)⡢
\&\f(CW128.138.204.0\fR ˤΤ class C ΥͥåȥǤ뤳Ȥ򼨤
Ū (\s-1CIDR\s0 ɽ) netmask 롣\fI\s-1CSNETS\s0\fR 
ۤΥͥåȥˤĤƤϡޥ netmask ޥå󥰤κݤ
Ȥ뤳Ȥˤʤ롣
.PP
.Vb 1
\& lisa           CUNETS = ALL
.Ve
.PP
桼 \fBlisa\fR ϥꥢ \fI\s-1CUNETS\s0\fR ΤʤۥȤǤ
ǤդΥޥɤ¹Ԥ뤳ȤǤ (ʤ
\f(CW128.138.0.0\fR Ȥ class B ͥåȥΥޥ)
.PP
.Vb 2
\& operator       ALL = DUMPS, KILL, SHUTDOWN, HALT, REBOOT, PRINTING,\e
\&                sudoedit /etc/printcap, /usr/oper/bin/
.Ve
.PP
桼 \fBoperator\fR ϡӤñݼ˸ꤵ줿ޥɤ
¹ԤǤ롣ξ礽ϡХååפꡢץ kill ꡢ
ƥꡢƥ򥷥åȥ󤷤ꤹΤ
ط륳ޥɤȡ\fI/usr/oper/bin/\fR ǥ쥯ȥˤǤդΥޥ
Ǥ롣
.PP
.Vb 1
\& joe            ALL = /usr/bin/su operator
.Ve
.PP
桼 \fBjoe\fR  \fIsu\fR\|(1) Ȥä operator ˤʤ뤳Ȥ
Ǥʤ
.PP
.Vb 1
\& %opers         ALL = (: ADMINGRP) /usr/sbin/
.Ve
.PP
\&\fBopers\fR 롼פΥ桼ϡ\fI/usr/sbin/\fR ˤ륳ޥɤ
ʬȤλʤǡ
\&\f(CW\*(C`Runas_Alias\*(C'\fR \fI\s-1ADMINGRP\s0\fR °
ǤդΥ롼 (ʤ\fBadm\fR  \fBoper\fR 롼) Ȥ
¹ԤǤ롣(: ¤ΤȤsudo-1.7.2p1 Ǥϡ
\&\fI/etc/sudoers\fR ѿȲǽ롼פ \f(CW\*(C`Runas_Alias\*(C'\fR 
ޤǤʤ褦ΤȤǸʤ顢\fI\s-1ADMINGRP\s0\fR
ǤϤʤ\fBadm\fR  \fBoper\fR ľܻꤷʤФʤʤ)
.PP
.Vb 1
\& pete           HPPA = /usr/bin/passwd [A\-Za\-z]*, !/usr/bin/passwd root
.Ve
.PP
桼 \fBpete\fR  \fI\s-1HPPA\s0\fR °ޥ root ʳʤ
ïΥѥɤǤѹ뤳ȤƤ롣嵭λϡ
\&\fIpasswd\fR\|(1) ޥɥ饤ʣΥ桼̾դʤȤ
ȤƤդƤۤ
.PP
.Vb 1
\& bob            SPARC = (OP) ALL : SGI = (OP) ALL
.Ve
.PP
桼 \fBbob\fR  \fI\s-1SPARC\s0\fR  \fI\s-1SGI\s0\fR °
ޥ \f(CW\*(C`Runas_Alias\*(C'\fR \fI\s-1OP\s0\fR ϿƤ
ǤդΥ桼Ȥ (\fBroot\fR  \fBoperator\fR Ǥ) ɤʥޥɤǤ
¹ԤǤ롣
.PP
.Vb 1
\& jim            +biglab = ALL
.Ve
.PP
桼 \fBjim\fR  \fIbiglab\fR ͥåȥ롼פ°ޥ
ɤʥޥɤǤ¹ԤǤ롣\fBsudo\fR ϡ\*(L"biglab\*(R"  '+' 
ƬդƤΤǡͥåȥ롼פǧ롣
.PP
.Vb 1
\& +secretaries   ALL = PRINTING, /usr/bin/adduser, /usr/bin/rmuser
.Ve
.PP
\&\fBsecretaries\fR ͥåȥ롼פΥ桼ϡ桼ɲä
󡢥ץ󥿤δˤⶨϤɬפ롣ǡ٤ƤΥޥ
μΥޥɤμ¹ԤǧƤ롣
.PP
.Vb 1
\& fred           ALL = (DB) NOPASSWD: ALL
.Ve
.PP
桼 \fBfred\fR  \f(CW\*(C`Runas_Alias\*(C'\fR \fI\s-1DB\s0\fR 
ǤդΥ桼Ȥ (\fBoracle\fR  \fBsybase\fR ) ѥɤ
ϤʤǤ⥳ޥɤ¹Ԥ뤳ȤǤ롣
.PP
.Vb 1
\& john           ALPHA = /usr/bin/su [!\-]*, !/usr/bin/su *root*
.Ve
.PP
桼 \fBjohn\fR  \fI\s-1ALPHA\s0\fR °ޥ \fIsu\fR\|(1) 
Ȥä root ʳïˤǤʤ뤳ȤǤ뤬su ˥ץ
ꤹ뤳ȤϵƤʤ
.PP
.Vb 1
\& jen            ALL, !SERVERS = ALL
.Ve
.PP
桼 \fBjen\fR  \f(CW\*(C`Host_Alias\*(C'\fR \fI\s-1SERVERS\s0\fR 
°ޥ (master, mail, www, ns) ʤޥǤ
ǤդΥޥɤ¹ԤǤ롣
.PP
.Vb 1
\& jill           SERVERS = /usr/bin/, !SU, !SHELLS
.Ve
.PP
\&\fBjill\fR  \f(CW\*(C`Host_Alias\*(C'\fR \fI\s-1SERVERS\s0\fR 
ʤޥǤ \fI/usr/bin/\fR ǥ쥯ȥˤǤդΥޥɤ
¹ԤǤ뤬\fI\s-1SU\s0\fR  \fI\s-1SHELLS\s0\fR Ȥ
\&\f(CW\*(C`Cmnd_Aliases\*(C'\fR °륳ޥɤϼ¹ԤǤʤ
.PP
.Vb 1
\& steve          CSNETS = (operator) /usr/local/op_commands/
.Ve
.PP
桼 \fBsteve\fR ϥǥ쥯ȥ \fI/usr/local/op_commands/\fR ˤ
ǤդΥޥɤ¹ԤǤ뤬operator Ȥ桼ȤƼ¹ԤǤ
.PP
.Vb 1
\& matt           valkyrie = KILL
.Ve
.PP
\&\fBmatt\fR ⼫ʬѤΥơ valkyrie 
ϥ󥰤ץ kill 餤ϤǤɬפ롣
.PP
.Vb 1
\& WEBMASTERS     www = (www) ALL, (root) /usr/bin/su www
.Ve
.PP
ۥ www  \f(CW\*(C`User_Alias\*(C'\fR \fI\s-1WEBMASTERS\s0\fR 
°뤤ʤ桼 (will, wendy, wim )桼 www (web ڡ
ͭ) ȤǤդΥޥɤ¹Ԥ뤳ȤǤ롣
ñ \fIsu\fR\|(1)  www ˤʤäƤ褤
.PP
.Vb 2
\& ALL            CDROM = NOPASSWD: /sbin/umount /CDROM,\e
\&                /sbin/mount \-o nosuid\e,nodev /dev/cd0a /CDROM
.Ve
.PP
ʤ桼 \f(CW\*(C`Host_Alias\*(C'\fR  \s-1CDROM\s0 
ޥ (orion, perseus, hercules)ѥɤϤ뤳Ȥʤ 
CD-ROM ޥȡޥȤǤ롣嵭ΥޥɤǤΤ
桼ˤȤäƤݤʤΤǡ륹ץȤȤ
ץ벽ƤޤΤ褤
.IP "[\fB\fR]:" 8
.IX Item "footnote2"
ȸsudo ϼۥȤ /etc/sudoers ɤޤʤ
ǡȤˤʤ롣AAA ȤۥȤ aaa Ȥ桼
Ȥ褦ۥ AAA  /etc/sudoers ˡ֥ۥ BBB ǥ桼 aaa 
sudo 𤷤 /bin/ls ¹ԤǤפȤҤäȤƤ⡢
桼 aaa ۥ AAA  telnet  ssh ȤäȤۥ BBB 
sudo ͳ ls ¹ԤǤ櫓ǤϤʤ줬Ǥ뤿ˤϡ
ۥ BBB  /etc/sudoers ˡBBB ǥ桼 aaa  sudo 𤷤 /bin/ls 
¹ԤǤפȤҤʤФʤʤΤۥ BBB Ǽ¹Ԥ
sudo  BBB  sudo ǤꡢBBB  sudo  BBB  /etc/sudoers 
ɤޤʤΤ顣
.Sp
ǤϡΡ嵭ΡפǼۥȰʳ꤬Ԥ
Τ ⤽⡢sudoers ν񼰤ǼۥȰʳΥۥȤ
ǤΤϡΤʤΤ ϡƤ륵Ȥ
٤ƤΥۥȤ򵭤 sudoers եĺäơ
٤ƤΥۥȤ˥ԡƻȤäȤꤷƤ뤫
⤷Τ٤ƤΥۥȤˤޤȤ֤
򤹤٤ƤΥۥȤ˶ͭΤʤ (ʤsudo 
Τʤ)LDAP κѤͤ٤Ǥ롣
.SH "ƥ˴ؤ"
.IX Header "SECURITY NOTES"
Ū˸äơ黻 '!' Ѥ \f(CW\*(C`ALL\*(C'\fR 
ޥɤΡְפ򤹤뤳Ȥϡޤ̤ʤ桼ϼ¹Ԥ
ޥɤ̾Ѥƥԡ줫餽¹Ԥ뤹Ȥä
äȤʤǡ΢򤫤ȤǤ뤫ȤС
.PP
.Vb 1
\&    bill        ALL = ALL, !SU, !SHELLS
.Ve
.PP
ȤԤϡ\fI\s-1SU\s0\fR  \fI\s-1SHELLS\s0\fR 󵭤Ƥ
ޥɤ \fBbill\fR ˤ¹Ԥ˻ߤ뤳ȤˤϤʤʤ
ʤʤ顢\fBbill\fR ȤƤϡޥɤñ̾Ѥ
ԡФ褤ǥۤΥץफ饷롦פ
Ѥ뤳ȤǤ뤫顢μ¤Ϥäޤ٤
ͤƤ٤ (ơäꤷˤˤä¤μ¸Ϥ
夲٤Ǥ)
.SH "롦פɻߤ"
.IX Header "PREVENTING SHELL ESCAPES"
\&\fBsudo\fR ץ¹ԤƤޤȡΥץϡ
ۤΥץμ¹ԤޤơǤ⼫ͳ˹ʤȤǤ롣
ΤȤƥˤʤ꤫ͤʤΤϡץब
롦פƤΤȤǤϤʤΤ
桼 \fBsudo\fR Υ󥰤򤹤ȴ뤳Ȥ
ǽˤʤ뤫褯Ȥץǥ롦פ
ƤΤˤϡΤ褦ʤΤ롣
(ʤ) 롢ǥڡ㡢᡼顢ߥʥ롣
.PP
н褹ˤϡŪĤˡ롣
.IP "" 10
.IX Item "restrict"
桼ǤդΥޥɤμ¹Ԥ褦ʥޥɤФơ桼
Ǥʤ褦ˤ롣ǥξϡ¥⡼ɤȾΤơ
롦פȤʤ⡼ɤäƤΤ¿
äȤ⡢\fBsudo\fR ͳǥǥȤΤʤ顢
\&\fBsudoedit\fR Ѥꤹ줿кǤ롣
롦פ󶡤ץϤ󤢤Τǡ
󶡤ʤץΤߤѤ褦˥桼¤Τϡ
Ƥ¸ԲǽǤ롣
.IP "noexec" 10
.IX Item "noexec"
ͭ饤֥򥵥ݡȤƤ¿ΥƥˤϡĶѿ (Ƥ 
\&\f(CW\*(C`LD_PRELOAD\*(C'\fR) ̤ζͭ饤֥ꤹ뤳Ȥˤäơ
ǥեȤΥ饤֥ؿ֤ǽϤ롣
äƥǤϡ\fBsudo\fR  \fInoexec\fR ǽȤС
\&\fBsudo\fR ¹ԤץबۤΥץ¹ԤΤ
ɤȤǤ롣Ȥϸ줬ƤϤޤΤϡưŪ˥󥯤줿
ͥƥ֤ʥץȤȤ˵դƤۤ
Ū˥󥯤줿ץ䡢Хʥꡦߥ졼ΤȤ
ưۤ OS Υץˤϸ̤ʤ
.Sp
\&\fBsudo\fR  \fInoexec\fR бƤ뤫ɤΤꤿä顢
root 桼ˤʤäƼΤ褦˼¹ԤƤߤФ褤
.Sp
.Vb 1
\&    sudo \-V | grep "dummy exec"
.Ve
.Sp
νϤˤʤդ˻ϤޤԤС
.Sp
.Vb 1
\&    File containing dummy exec functions:
.Ve
.Sp
ΤȤϡ֤ \fBsudo\fR ɸ饤֥ˤ exec եߥ꡼δؿ
ñ˥顼֤μʬȤδؿ֤ȤȤ
ǰʤ顢\fInoexec\fR ͭɤѥ˳Τ
гμ¤ˡϤʤ\fInoexec\fR  SunOS, Solaris, *BSD, Linux,
\&\s-1IRIX\s0, Tru64 \s-1UNIX\s0, MacOS X, HP-UX 11.x ǻȤϤ
\&\s-1AIX\s0  UnixWare ǤϻȤʤȤ狼äƤ롣Ķѿ 
\&\f(CW\*(C`LD_PRELOAD\*(C'\fR 򥵥ݡȤƤ뤿Ƥ OS ʤ顢
\&\fInoexec\fR ȤȻפѤƤ륪ڥ졼ƥ󥰥ƥ
ޥ˥奢ڡĴ٤ơʥߥå󥫤ˤĤ ( ld.so,
ld.so.1, dyld, dld.sl, rld, loader Ȥä̾ˤʤäƤ) 
\&\f(CW\*(C`LD_PRELOAD\*(C'\fR ݡȤƤ뤫ɤǧƤۤ
.Sp
륳ޥɤФ \fInoexec\fR ͭˤˤϡ
嵭֥桼ץǽҤ٤褦ˡ\f(CW\*(C`NOEXEC\*(C'\fR 
Ѥ롣ΤȤƷǤ褦
.Sp
.Vb 1
\& aaron  shanty = NOEXEC: /usr/bin/more, /usr/bin/vi
.Ve
.Sp
Ǥϡ桼 \fBaaron\fR Фơ\fInoexec\fR ͭˤǡ
\&\fI/usr/bin/more\fR  \fI/usr/bin/vi\fR μ¹ԤĤƤ롣
Τ褦ˤСĤΥޥɤ (Τ褦) ۤΥޥɤ
¹Ԥ뤳ȤǤʤʤ櫓ѤƤ륷ƥब \fInoexec\fR 
бǽϤ뤫ɤ褯狼ʤϡꤢ 
\&\fInoexec\fR ơ̤뤫ɤΤƤߤФ褤ʤ
ĤäƤǤϤ
.PP
դƤۤ롦פζػߤǽǤϤʤ롼Ȥθ¤
ưƤץˤϡۤˤ⡢Τ뤵ޤޤʺ (ե
ȤؤȤ񤭤Ȥ) ǽǤꡢפ
¤礷ƤޤȤ⤢ꤨΤä˥ǥˤĤƸȡ
桼ˤ \fBsudoedit\fR ¹ԤĤͿΤˡǤ롣
.SH "Ϣ"
.IX Header "SEE ALSO"
\&\fIrsh\fR\|(1), \fIsu\fR\|(1), \fIfnmatch\fR\|(3), \fIglob\fR\|(3), \fIsudo\fR\|(8), \fIvisudo\fR\|(8)
.SH "ٹ"
.IX Header "CAVEATS"
\&\fIsudoers\fR եԽˤϡ\fBɬ\fR \fBvisudo\fR ޥɤ
Ȥ٤С\fBvisudo\fR եåʸˡΥ
äƤ롣\fIsudoers\fR եʸˡŪʴְ㤤ȡ
\&\fBsudo\fR ưʤΤǡ\fIsudoers\fR եˤʸˡ顼
ФˤäƤϤʤʤΤ
.PP
ͥåȥ롼פ (桼ˤĤƤǤϤʤ) ޥˤĤƻѤ
\&\fInetgroup\fR ե˴ۥ̾򵭺ܤ (Ƥ
Τ)ΥޥΥۥ̾ \f(CW\*(C`hostname\*(C'\fR 
ޥɤϤ̤δ̾ǽ񤯤ʤ 
\&\fIsudoers\fR ե \fIfqdn\fR ץȤʤФʤ
ʤ
.SH "Х"
.IX Header "BUGS"
\&\fBsudo\fR ˥ХȯȻפä顢Υڡ˥ơ
ХݡȤФƤ
.br
http://www.sudo.ws/sudo/bugs/
.SH "ݡ"
.IX Header "SUPPORT"
٤̵ݡȤ sudo-users ᡼󥰥ꥹȤ̤ѤǤ롣
ɤ䥢֤θˤϲ URL ˤʤ뤳ȡ
.br
http://www.sudo.ws/mailman/listinfo/sudo\-users
.SH ""
.IX Header "DISCLAIMER"
\&\fBsudo\fR ϡָΤޤޡ󶡤롣Ūʡ뤤ۼŪ
ʤݾڤ⡢ŪؤŬˤĤƤۼŪݾڤޤᡢ
ޤΤߤ˻ߤޤ餺ǧ롣ܺ٤ʸˤĤƤϡ
\&\fBsudo\fR ȰۤƤ \s-1LICENSE\s0 ե
 Web ڡ
.br
http://www.sudo.ws/sudo/license.html