# Kapitola 4.7
# Konfigurace pro sudo.

# Reset prostredi pri prepnuti do kontextu roota
Defaults	env_reset

Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
# User privilege specification
root	ALL=(ALL:ALL) ALL

# Domenove ucty - povoleni pro sudo a WinSCP
# AD skupiny je treba uvest znakem %.
# Zpusob zapisu naznaci pouziti prikazu id jmenouzivatele.
# Prikaz NOPASSWD: /usr/lib/openssh/sftp-server zajisti eskalaci prav pri pripojeni WinSCP 
%_Domain\ Linux\ Admins ALL=(ALL)ALL,NOPASSWD: /usr/lib/openssh/sftp-server
%_POB01\ Linux\ Admins ALL=(ALL)ALL,NOPASSWD: /usr/lib/openssh/sftp-server


# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

# Allow members of group sudo to execute any command
%sudo	ALL=(ALL:ALL) ALL

