Import translated manuals from JM CVS Repository.

[linuxjm/jm.git] / manual / sudo / release / man5 / sudoers.5

.\" Copyright (c) 1994-1996, 1998-2005, 2007-2009
.\"     Todd C. Miller <Todd.Miller@courtesan.com>
.\" 
.\" Permission to use, copy, modify, and distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
.\" copyright notice and this permission notice appear in all copies.
.\" 
.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" 
.\" Sponsored in part by the Defense Advanced Research Projects
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\" 
.\" Japanese Version Copyright (c) 2000-2002 Yuichi SATO
.\"   and 2009 Yoichi Chonan
.\"         all rights reserved.
.\" Translated Sat Oct  7 14:39:18 JST 2000
.\"         by Yuichi SATO <ysato444@yahoo.co.jp>
.\" Updated & Modified Fri Dec  6 04:40:44 JST 2002 by Yuichi SATO
.\" New Translation (sudo-1.6.9p17) Fri Jan 23 10:31:17 JST 2009
.\"         by Yoichi Chonan <cyoichi@maple.ocn.ne.jp>
.\" Updated & Modified (sudo-1.7.2p1) Sat Nov 14 21:15:16 JST 2009
.\"         by Yoichi Chonan
.\" Modified Tue Nov 24 20:00:00 JST 2009 by Yoichi Chonan
.\"
.\" $Sudo: sudoers.man.in,v 1.80 2009/06/30 12:41:09 millert Exp $
.\" Automatically generated by Pod::Man 2.16 (Pod::Simple 3.05)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sh \" Subsection heading
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  \*(C+ will
.\" give a nicer C++.  Capital omega is used to do unbreakable dashes and
.\" therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
.\" nothing in troff, for use with C<>.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` 
.    ds C' 
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.ie \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.el \{\
.    de IX
..
.\}
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "SUDOERS 5"
.TH SUDOERS 5 "June 30, 2009" "1.7.2p1" "MAINTENANCE COMMANDS"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH "̾Á°"
sudoers \- ¤É¤Î¥æ¡¼¥¶¤¬²¿¤ò¼Â¹Ô¤Ç¤­¤ë¤«¤Î¥ê¥¹¥È
.SH "ÀâÌÀ"
.IX Header "DESCRIPTION"
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ÏÆó¼ïÎà¤Î¥¨¥ó¥È¥ê¤«¤é¹½À®¤µ¤ì¤Æ¤¤¤ë¡£
(Íפ¹¤ë¤ËÊÑ¿ô¤Ç¤¢¤ë) ¥¨¥¤¥ê¥¢¥¹¤È (郎²¿¤ò¼Â¹Ô¤Ç¤­¤ë¤«¤ò
»ØÄꤷ¤Æ¤¤¤ë) ¥æ¡¼¥¶ÀßÄê¤À¡£
.IP "[\fBÌõÃí\fR]:" 8
.IX Item "footnote1"
Ìõ¼Ô¤È¤·¤Æ¤Ï¡¢¡Ö¥¨¥¤¥ê¥¢¥¹¡¢¥Ç¥Õ¥©¥ë¥È»ØÄê¡¢¥æ¡¼¥¶ÀßÄê¤Î»°¼ïÎà¤Î
¥¨¥ó¥È¥ê¤«¤é¹½À®¤µ¤ì¤Æ¤¤¤ë¡×¤È¸À¤Ã¤¿Êý¤¬¼ÂÂ֤˹ç¤Ã¤Æ¤¤¤ë¤Î¤Ç¤Ï¤Ê¤¤¤«¤È»×¤¦¡£
.PP
°ì¿Í¤Î¥æ¡¼¥¶¤ËÊ£¿ô¤Î¥¨¥ó¥È¥ê¤¬¥Þ¥Ã¥Á¤¹¤ë¤È¤­¤Ï¡¢½çÈÖ¤ËŬÍѤµ¤ì¤ë¡£
Ê£¿ô¤Î»ØÄ꤬¥Þ¥Ã¥Á¤·¤Æ¤¤¤ë²Õ½ê¤Ë¤Ä¤¤¤Æ¤Ï¡¢ºÇ¸å¤Ë¥Þ¥Ã¥Á¤·¤¿¤â¤Î¤¬
»ÈÍѤµ¤ì¤ë (¤½¤ì¤¬°ìÈÖÌÀ¼¨Åª¤Ê¥Þ¥Ã¥Á¤À¤È¤Ï¤«¤®¤é¤Ê¤¤¤¬)¡£
.PP
°Ê²¼¤Ç¤Ï \fIsudoers\fR ¤Îʸˡ¤ò³ÈÄ¥ Backus-Naur µ­Ë¡ (\s-1EBNF\s0) ¤ò
»È¤Ã¤Æµ­½Ò¤¹¤ë¡£\s-1EBNF\s0 ¤¬¤É¤ó¤Ê¤â¤Î¤«ÃΤé¤Ê¤¤¤«¤é¤È¤¤¤Ã¤Æ¡¢
¤¢¤­¤é¤á¤Ê¤¤¤Ç¤¤¤¿¤À¤­¤¿¤¤¡£¤ï¤ê¤È´Êñ¤Ê¤â¤Î¤À¤·¡¢°Ê²¼¤Ë½Ð¤Æ¤¯¤ëÄêµÁ¤Ë¤Ï
¾Ü¤·¤¤ÀâÌÀ¤òÉÕ¤±¤Æ¤ª¤­¤Þ¤¹¤«¤é¡£
.Sh "\s-1EBNF\s0 Áá¤ï¤«¤ê"
.IX Subsection "Quick guide to EBNF"
\&\s-1EBNF\s0 ¤Ï¸À¸ì¤Îʸˡ¤òµ­½Ò¤¹¤ë´Ê·é¤Ç¸·Ì©¤ÊÊýË¡¤Ç¤¢¤ë¡£
\&\s-1EBNF\s0 ¤Î¸Ä¡¹¤ÎÄêµÁ¤ÏÀ¸À®µ¬Â§¤«¤é¤Ç¤­¤Æ¤¤¤ë¡£¤¿¤È¤¨¤Ð¡¢
.PP
.Vb 1
\& ¥·¥ó¥Ü¥ë ::= ÄêµÁ | Ê̤ÎÄêµÁ 1 | Ê̤ÎÄêµÁ 2 ...
.Ve
.PP
¸Ä¡¹¤ÎÀ¸À®µ¬Â§¤Ï¡¢¤Û¤«¤ÎÀ¸À®µ¬Â§¤ò»²¾È¤·¡¢¤½¤Î¤è¤¦¤Ë¤·¤Æ¸À¸ì¤Îʸˡ¤ò
ºî¤ê¾å¤²¤Æ¤¤¤ë¡£¤Þ¤¿ \s-1EBNF\s0 ¤Ë¤Ï°Ê²¼¤Î±é»»»Ò¤¬´Þ¤Þ¤ì¤ë¤¬¡¢
Àµµ¬É½¸½¤Ç¸æ¸¤¸¤ÎÆɼԤ⿤¤¤À¤í¤¦¡£¤À¤¬¡¢¤¤¤ï¤æ¤ë¡Ö¥ï¥¤¥ë¥É¥«¡¼¥É¡×ʸ»ú¤È
º®Æ±¤·¤Ê¤¤¤Ç¤¤¤¿¤À¤­¤¿¤¤¡£¤¢¤ì¤ÏÊ̤ΰÕÌ£¤ò»ý¤Ã¤Æ¤¤¤ë¡£
.ie n .IP "\*(C`?\*(C'" 4
.el .IP "\f(CW\*(C`?\*(C'\fR" 4
.IX Item "?"
ľÁ°¤Î¥·¥ó¥Ü¥ë (¤Þ¤¿¤Ï¡¢¥·¥ó¥Ü¥ë¤Î¥°¥ë¡¼¥×) ¤¬¡¢¤¢¤Ã¤Æ¤â¤Ê¤¯¤Æ¤â¤è¤¤¤³¤È¤ò
°ÕÌ£¤¹¤ë¡£¤¹¤Ê¤ï¤Á¤½¤Î¥·¥ó¥Ü¥ë¤Ï¡¢1 ²ó¸½¤ì¤Æ¤â¤è¤¤¤·¡¢1 ²ó¤â¸½¤ì¤Ê¤¤¤Ç¤â¤è¤¤¡£
.ie n .IP "\*(C`*\*(C'" 4
.el .IP "\f(CW\*(C`*\*(C'\fR" 4
.IX Item "*"
ľÁ°¤Î¥·¥ó¥Ü¥ë (¤Þ¤¿¤Ï¡¢¥·¥ó¥Ü¥ë¤Î¥°¥ë¡¼¥×) ¤¬ 0 ²ó°Ê¾å¸½¤ì¤ë¡£
.ie n .IP "\*(C`+\*(C'" 4
.el .IP "\f(CW\*(C`+\*(C'\fR" 4
.IX Item "+"
ľÁ°¤Î¥·¥ó¥Ü¥ë (¤Þ¤¿¤Ï¡¢¥·¥ó¥Ü¥ë¤Î¥°¥ë¡¼¥×) ¤¬ 1 ²ó°Ê¾å¸½¤ì¤ë¡£
.PP
´Ý¥«¥Ã¥³¤ò»È¤¦¤È¡¢Ê£¿ô¤Î¥·¥ó¥Ü¥ë¤ò¥°¥ë¡¼¥×¤Ë¤Þ¤È¤á¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
¤Ê¤ªº®Íð¤òÈò¤±¤ë¤¿¤á¡¢°Ê²¼¤ÎÄêµÁ¤Ç (¥·¥ó¥Ü¥ë̾¤Ç¤Ï¤Ê¤¯) ʸ»ú¤É¤ª¤ê¤Î
ʸ»úÎó¤äµ­¹æ¤ò¼¨¤¹¾ì¹ç¤Ï¡¢¤½¤ì¤ò¥·¥ó¥°¥ë¥¯¥©¡¼¥È ('') ¤Ç°Ï¤à¤³¤È¤Ë¤¹¤ë¡£
.Sh "¥¨¥¤¥ê¥¢¥¹"
.IX Subsection "Aliases"
¥¨¥¤¥ê¥¢¥¹¤Ë¤Ï»Í¼ïÎढ¤ë¡£\f(CW\*(C`User_Alias\*(C'\fR,
\&\f(CW\*(C`Runas_Alias\*(C'\fR, \f(CW\*(C`Host_Alias\*(C'\fR,
\&\f(CW\*(C`Cmnd_Alias\*(C'\fR ¤Ç¤¢¤ë¡£
.PP
.Vb 4
\& Alias ::= \*(AqUser_Alias\*(Aq  User_Alias (\*(Aq:\*(Aq User_Alias)* |
\&           \*(AqRunas_Alias\*(Aq Runas_Alias (\*(Aq:\*(Aq Runas_Alias)* |
\&           \*(AqHost_Alias\*(Aq  Host_Alias (\*(Aq:\*(Aq Host_Alias)* |
\&           \*(AqCmnd_Alias\*(Aq  Cmnd_Alias (\*(Aq:\*(Aq Cmnd_Alias)*
\&
\& User_Alias ::= NAME \*(Aq=\*(Aq User_List
\&
\& Runas_Alias ::= NAME \*(Aq=\*(Aq Runas_List
\&
\& Host_Alias ::= NAME \*(Aq=\*(Aq Host_List
\&
\& Cmnd_Alias ::= NAME \*(Aq=\*(Aq Cmnd_List
\&
\& NAME ::= [A\-Z]([A\-Z][0\-9]_)*
.Ve
.PP
¸Ä¡¹¤Î¥¨¥¤¥ê¥¢¥¹¤ÎÄêµÁ¤Ï¡¢¼¡¤Î·Á¤ò¤È¤ë¡£
.PP
.Vb 1
\& Alias_Type NAME = item1, item2, ...
.Ve
.PP
¾åµ­¤Ë¤ª¤¤¤Æ¡¢\fIAlias_Type\fR ¤Ï \f(CW\*(C`User_Alias\*(C'\fR,
\&\f(CW\*(C`Runas_Alias\*(C'\fR, \f(CW\*(C`Host_Alias\*(C'\fR,
\&\f(CW\*(C`Cmnd_Alias\*(C'\fR ¤Î¤¦¤Á¤Î°ì¤Ä¤Ç¤¢¤ë¡£
\&\f(CW\*(C`NAME\*(C'\fR ¤Ï¥¢¥ë¥Õ¥¡¥Ù¥Ã¥È¤ÎÂçʸ»ú¡¢¿ô»ú¡¢
¥¢¥ó¥À¡¼¥¹¥³¥¢ ('_') ¤«¤é¤Ê¤ëʸ»úÎó¤Ç¤¢¤ë¤¬¡¢\fBÀèƬ¤Îʸ»ú¤ÏÂçʸ»ú\fR¤Ç
¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£Æ±¤¸¥¿¥¤¥×¤Î¥¨¥¤¥ê¥¢¥¹ÄêµÁ¤ò¡¢¥³¥í¥ó¤Ç (':') ¤Ä¤Ê¤¤¤Ç¡¢
°ì¹Ô¤ËÊ£¿ô½ñ¤¯¤³¤È¤â¤Ç¤­¤ë¡£¤¿¤È¤¨¤Ð¡¢
.PP
.Vb 1
\& Alias_Type NAME = item1, item2, item3 : NAME = item4, item5
.Ve
.PP
°Ê²¼¤Ç¤Ï¡¢¥¨¥¤¥ê¥¢¥¹¤ÎÍ­¸ú¤ÊÍ×ÁǤȤʤë¤â¤Î¤òÄêµÁ¤¹¤ë¡£
.PP
.Vb 2
\& User_List ::= User |
\&               User \*(Aq,\*(Aq User_List
\&
\& User ::= \*(Aq!\*(Aq* username |
\&          \*(Aq!\*(Aq* \*(Aq#\*(Aquid |
\&          \*(Aq!\*(Aq* \*(Aq%\*(Aqgroup |
\&          \*(Aq!\*(Aq* \*(Aq+\*(Aqnetgroup |
\&          \*(Aq!\*(Aq* \*(Aq%:\*(Aqnonunix_group |
\&          \*(Aq!\*(Aq* User_Alias
.Ve
.PP
\&\f(CW\*(C`User_List\*(C'\fR ¤Ï°ì¸Ä°Ê¾å¤Î¡¢¥æ¡¼¥¶Ì¾¡¢uid ('#' ¤¬
Ƭ¤ËÉÕ¤¯)¡¢¥·¥¹¥Æ¥à¥°¥ë¡¼¥×̾ ('%' ¤¬Æ¬¤ËÉÕ¤¯) ¡¢¥Í¥Ã¥È¥°¥ë¡¼¥×̾
('+' ¤¬Æ¬¤ËÉÕ¤¯)¡¢Èó UNIX ¥°¥ë¡¼¥×̾ ('%:' ¤¬Æ¬¤ËÉÕ¤¯)¡¢
\&\f(CW\*(C`User_Alias\*(C'\fR ¤«¤é¤Ê¤ë¡£
¥ê¥¹¥È¤Î³Æ¹àÌܤÎÁ°¤Ë¤Ï°ì¸Ä°Ê¾å¤Î '!' ±é»»»Ò¤òÉÕ¤±¤Æ¤â¤è¤¤¡£
´ñ¿ô¸Ä¤Î '!' ¤Ï¤½¤Î¹àÌܤÎÃͤòÈÝÄꤹ¤ë¡£¶ö¿ô¸Ä¤Î¾ì¹ç¤Ï¸ß¤¤Á껦¤¹¤ë¤À¤±¤À¡£
.PP
¥æ¡¼¥¶Ì¾¡¢¥°¥ë¡¼¥×̾¡¢¥Í¥Ã¥È¥°¥ë¡¼¥×̾¡¢Èó UNIX ¥°¥ë¡¼¥×̾¤Ï¡¢
¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç°Ï¤á¤Ð¡¢Æüìʸ»ú¤ò¥¨¥¹¥±¡¼¥×¤·¤Ê¤¤¤Ç¤¹¤à¡£
¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç°Ï¤Þ¤º¤ËÆüìʸ»ú¤ò»È¤¤¤¿¤¤¤Ê¤é¡¢¥¨¥¹¥±¡¼¥×¤·¤¿ 16 ¿Ê¿ô¤ò
»ØÄꤷ¤Æ¤ä¤ì¤Ð¤è¤¤¡£¤¿¤È¤¨¤Ð¡¢¥¹¥Ú¡¼¥¹¤Ê¤é \ex20 ¤È¤¤¤¦¶ñ¹ç¤À¡£
.PP
Èó UNIX ¥°¥ë¡¼¥×̾¤Î½ñ¼°¤Ï¡¢ÍøÍѤ¹¤ë¥µ¡¼¥Ó¥¹¤Î¼ÂÁõ¤Ë¤è¤Ã¤Æ·è¤Þ¤ë¡£¤¿¤È¤¨¤Ð¡¢
\&\s-1Quest Authentication Services\s0 ¤Î \s-1AD\s0 ¥Ð¥Ã¥¯¥¨¥ó¥É¤Ï¡¢
°Ê²¼¤Î½ñ¼°¤ò¥µ¥Ý¡¼¥È¤·¤Æ¤¤¤ë¡£
.IP "\(bu" 4
Ʊ¤¸¥É¥á¥¤¥ó¤Î¥°¥ë¡¼¥×:  \*(L"Group Name\*(R"
.IP "\(bu" 4
Ǥ°Õ¤Î¥É¥á¥¤¥ó¤Î¥°¥ë¡¼¥×:  \*(L"Group Name@FULLY.QUALIFIED.DOMAIN\*(R"
.IP "\(bu" 4
¥°¥ë¡¼¥× \s-1SID:\s0 \*(L"S\-1\-2\-34\-5678901234\-5678901234\-5678901234\-567\*(R"
.PP
¥°¥ë¡¼¥×̾¤ò°Ï¤à°úÍÑÉä¤ÏǤ°Õ¤Ç¤¢¤ë¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£Ê¸»úÎó¤ò
°úÍÑÉä¤Ç°Ï¤Þ¤Ê¤¤¾ì¹ç¤Ï¡¢¥¹¥Ú¡¼¥¹¤ä '@' µ­¹æ¤ò¥¨¥¹¥±¡¼¥×¤¹¤ë¤¿¤á¤Ë¡¢
¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å (\e) ¤ò»È¤ï¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
.PP
.Vb 2
\& Runas_List ::= Runas_Member |
\&                Runas_Member \*(Aq,\*(Aq Runas_List
\&
\& Runas_Member ::= \*(Aq!\*(Aq* username |
\&                  \*(Aq!\*(Aq* \*(Aq#\*(Aquid |
\&                  \*(Aq!\*(Aq* \*(Aq%\*(Aqgroup |
\&                  \*(Aq!\*(Aq* +netgroup |
\&                  \*(Aq!\*(Aq* Runas_Alias
.Ve
.PP
\&\f(CW\*(C`Runas_List\*(C'\fR ¤Ï \f(CW\*(C`User_List\*(C'\fR ¤Ë»÷¤Æ¤¤¤ë¡£
°ã¤¦¤Î¤Ï¡¢\f(CW\*(C`User_Alias\*(C'\fR ¤Ç¤Ï¤Ê¤¯¡¢
\&\f(CW\*(C`Runas_Alias\*(C'\fR ¤¬»È¤¨¤ë¤³¤È¤À¡£¥æ¡¼¥¶Ì¾¤ä¥°¥ë¡¼¥×̾¤Î
¥Þ¥Ã¥Á¤Ïʸ»úÎó¤È¤·¤Æ¹Ô¤ï¤ì¤ë¤³¤È¤Ëµ¤¤òÉÕ¤±¤Æ¤Û¤·¤¤¡£¸À¤¤´¹¤¨¤ë¤È¡¢
Æó¤Ä¤Î¥æ¡¼¥¶Ì¾ (¤¢¤ë¤¤¤Ï¥°¥ë¡¼¥×̾) ¤Ï¡¢¤«¤ê¤ËƱ¤¸ uid (gid) ¤ò
»ý¤Ã¤Æ¤¤¤Æ¤â¡¢Ê̸ĤΤâ¤Î¤È¸«¤Ê¤µ¤ì¤ë¤Î¤Ç¤¢¤ë¡£
¤À¤«¤é¡¢¤â¤·Æ±¤¸ uid ¤ò»ý¤Ã¤¿¤¹¤Ù¤Æ¤Î¥æ¡¼¥¶Ì¾¤Ë¥Þ¥Ã¥Á¤µ¤»¤¿¤«¤Ã¤¿¤é 
(¤¿¤È¤¨¤Ð¡¢root ¤È toor ¤¬¤½¤¦¤À¤È¤·¤è¤¦)¡¢¥æ¡¼¥¶Ì¾¤ÎÂå¤ï¤ê¤Ë uid ¤ò
»È¤¨¤Ð¤è¤¤ (¤³¤ÎÎã¤Ê¤é¡¢#0 ¤Ç¤¢¤ë)¡£
.PP
.Vb 2
\& Host_List ::= Host |
\&               Host \*(Aq,\*(Aq Host_List
\&
\& Host ::= \*(Aq!\*(Aq* hostname |
\&          \*(Aq!\*(Aq* ip_addr |
\&          \*(Aq!\*(Aq* network(/netmask)? |
\&          \*(Aq!\*(Aq* \*(Aq+\*(Aqnetgroup |
\&          \*(Aq!\*(Aq* Host_Alias
.Ve
.PP
\&\f(CW\*(C`Host_List\*(C'\fR ¤Ï°ì¸Ä°Ê¾å¤Î¡¢¥Û¥¹¥È̾¡¢\s-1IP\s0 ¥¢¥É¥ì¥¹¡¢
¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¡¢¥Í¥Ã¥È¥°¥ë¡¼¥×̾ (Ƭ¤Ë '+' ¤¬ÉÕ¤¯)¡¢¤ª¤è¤Ó
¾¤Î¥¨¥¤¥ê¥¢¥¹¤«¤é¤Ê¤ë¡£¤³¤³¤Ç¤â¤Þ¤¿¡¢'!' ±é»»»Ò¤òÉÕ¤±¤Æ¡¢¹àÌܤÎÃͤò
ÈÝÄꤹ¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¤Ë¥Í¥Ã¥È¥Þ¥¹¥¯¤ò
»ØÄꤷ¤Ê¤«¤Ã¤¿¾ì¹ç¤Ï¡¢\fBsudo\fR ¤¬¥í¡¼¥«¥ë¥Û¥¹¥È¤Î
¥Í¥Ã¥È¥ï¡¼¥¯¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤ò°ì¤Ä°ì¤Ä»²¾È¤·¡¢»ØÄꤵ¤ì¤¿
¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¤ÈƱ¤¸¥¢¥É¥ì¥¹¤ò»ý¤Ä¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤¬¤¢¤ì¤Ð¡¢
¤½¤Î¥Í¥Ã¥È¥Þ¥¹¥¯¤ò»ÈÍѤ¹¤ë¤³¤È¤Ë¤Ê¤ë¡£¥Í¥Ã¥È¥Þ¥¹¥¯¤Î»ØÄê¤Ï¡¢
ɸ½à¤Î \s-1IP\s0 ¥¢¥É¥ì¥¹É½µ­ (¤¿¤È¤¨¤Ð 255.255.255.0 ¤È¤« 
ffff:ffff:ffff:ffff:: ¤È¤«) ¤Ç¤â¤è¤¯¡¢\&\s-1CIDR\s0 ɽµ­ (¥Ó¥Ã¥È¿ô¡¢
¤¿¤È¤¨¤Ð 24 ¤È¤« 64 ¤È¤«) ¤Ç¤â¤è¤¤¡£¥Û¥¹¥È̾¤Î°ìÉô¤Ë¥·¥§¥ëÉ÷¤Î
¥ï¥¤¥ë¥É¥«¡¼¥É¤ò»ÈÍѤ¹¤ë¤³¤È¤¬¤Ç¤­¤ë¤¬ (²¼µ­¤Î¥ï¥¤¥ë¥É¥«¡¼¥É¤Î¥»¥¯¥·¥ç¥ó¤ò
»²¾È)¡¢»ÈÍÑ¥Þ¥·¥ó¤Î \f(CW\*(C`hostname\*(C'\fR ¥³¥Þ¥ó¥É¤¬
´°Á´½¤¾þ¥É¥á¥¤¥ó̾¤òÊÖ¤µ¤Ê¤¤¾ì¹ç¡¢¥ï¥¤¥ë¥É¥«¡¼¥É¤ò
ÍøÍѤ¹¤ë¤Ë¤Ï \fIfqdn\fR ¥ª¥×¥·¥ç¥ó¤ò»È¤¦É¬Íפ¬¤¢¤ë¡£
.PP
.Vb 2
\& Cmnd_List ::= Cmnd |
\&               Cmnd \*(Aq,\*(Aq Cmnd_List
\&
\& commandname ::= filename |
\&                 filename args |
\&                 filename \*(Aq""\*(Aq
\&
\& Cmnd ::= \*(Aq!\*(Aq* commandname |
\&          \*(Aq!\*(Aq* directory |
\&          \*(Aq!\*(Aq* "sudoedit" |
\&          \*(Aq!\*(Aq* Cmnd_Alias
.Ve
.PP
\&\f(CW\*(C`Cmnd_List\*(C'\fR ¤Ï°ì¸Ä°Ê¾å¤Î¡¢¥³¥Þ¥ó¥É̾¡¢¥Ç¥£¥ì¥¯¥È¥ê¡¢
¾¤Î¥¨¥¤¥ê¥¢¥¹¤«¤é¤Ê¤ë¥ê¥¹¥È¤Ç¤¢¤ë¡£¥³¥Þ¥ó¥É̾¤ÏÀäÂХѥ¹¤Î¥Õ¥¡¥¤¥ë̾¤Ç
¤¢¤ê¡¢¥·¥§¥ëÉ÷¤Î¥ï¥¤¥ë¥É¥«¡¼¥É¤ò´Þ¤ó¤Ç¤¤¤Æ¤â¹½¤ï¤Ê¤¤ (²¼µ­¤Î¥ï¥¤¥ë¥É¥«¡¼¥É¤Î
¥»¥¯¥·¥ç¥ó¤ò»²¾È)¡£Ã±¤Ë¥Õ¥¡¥¤¥ë̾¤À¤±»ØÄꤷ¤¿¾ì¹ç¡¢¥æ¡¼¥¶¤Ï¤ªË¾¤ß¤Î
¤É¤ó¤Ê°ú¤­¿ô¤Ç¤âÉÕ¤±¤Æ¤½¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤È¤Ï¸À¤¨¡¢
¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤ò (¥ï¥¤¥ë¥É¥«¡¼¥É¤ò´Þ¤á¤Æ) »ØÄꤷ¤Æ¤â¹½¤ï¤Ê¤¤¤·¡¢
¤Þ¤¿¡¢°ú¤­¿ô¤Ë \f(CW""\fR ¤ò»ØÄꤷ¤Æ¡¢¤½¤Î¥³¥Þ¥ó¥É¤Ï
\&\fB¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤Ê¤·\fR¤Î¼Â¹Ô¤Î¤ß¤¬²Äǽ¤À¤È»Ø¼¨¤¹¤ë¤³¤È¤â¤Ç¤­¤ë¡£
¥Ç¥£¥ì¥¯¥È¥ê¤Ï '/' ¤Ç½ª¤ï¤ëÀäÂХѥ¹Ì¾¤Ç¤¢¤ë¡£
\&\f(CW\*(C`Cmnd_List\*(C'\fR ¤Ë
¥Ç¥£¥ì¥¯¥È¥ê¤ò»ØÄꤹ¤ë¤È¡¢¥æ¡¼¥¶¡¼¤Ï¤½¤Î¥Ç¥£¥ì¥¯¥È¥êÆâ¤ÎǤ°Õ¤Î¥Õ¥¡¥¤¥ë¤ò
¼Â¹Ô¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë (¤À¤¬¡¢¤½¤Î¥µ¥Ö¥Ç¥£¥ì¥¯¥È¥ê¤Ë¤¢¤ë¥Õ¥¡¥¤¥ë¤Ï¼Â¹Ô¤Ç¤­¤Ê¤¤)¡£
.PP
\&\f(CW\*(C`Cmnd\*(C'\fR ¤¬¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤òȼ¤Ã¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢
\&\f(CW\*(C`Cmnd\*(C'\fR Ãæ¤Î°ú¤­¿ô¤Ï¡¢¥æ¡¼¥¶¤¬¥³¥Þ¥ó¥É¥é¥¤¥ó¤ËÂǤÁ¹þ¤à
°ú¤­¿ô¤ÈÀµ³Î¤Ë°ìÃפ·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤ (Cmnd Ãæ¤Î°ú¤­¿ô¤Ë¥ï¥¤¥ë¥É¥«¡¼¥É¤¬
¤¢¤ë¤Ê¤é¤Ð¡¢¤½¤ì¤¬¥³¥Þ¥ó¥É¥é¥¤¥ó¤Î°ú¤­¿ô¤È¥Þ¥Ã¥Á¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤)¡£
°Ê²¼¤Ëµó¤²¤ëʸ»ú¤ò¥³¥Þ¥ó¥É°ú¤­¿ô¤ÎÃæ¤ÇÍѤ¤¤ë¤È¤­¤Ï¡¢'\e' ¤Ë¤è¤Ã¤Æ
¥¨¥¹¥±¡¼¥×¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£ ',', ':', '=', '\e' ¤¬
¤½¤ì¤Ç¤¢¤ë¡£¥¹¥Ú¥·¥ã¥ë¥³¥Þ¥ó¥É \f(CW"sudoedit"\fR ¤Ï¡¢¥æ¡¼¥¶¤¬ 
\&\fBsudo\fR ¤ò \fB-e\fR ¥ª¥×¥·¥ç¥óÉÕ¤­¤Ç (¤¢¤ë¤¤¤Ï¡¢\fBsudoedit\fR ¤È¤¤¤¦
¥³¥Þ¥ó¥É̾¤Ç) ¼Â¹Ô¤¹¤ë¤³¤È¤òµö²Ä¤¹¤ë¤¿¤á¤Ë»ÈÍѤ¹¤ë¡£¤³¤Î¾ì¹ç¡¢
¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤ò¼è¤ë¤³¤È¤¬¤Ç¤­¤ë¤Î¤Ï¡¢ÉáÄ̤Υ³¥Þ¥ó¥É¤È¤Þ¤Ã¤¿¤¯
ƱÍͤǤ¢¤ë¡£
.Sh "¥Ç¥Õ¥©¥ë¥È¤Î»ØÄê (Defaults)"
.IX Subsection "Defaults"
¤«¤Ê¤ê¤ÎÀßÄꥪ¥×¥·¥ç¥ó¤¬¡¢°ì¹Ô°Ê¾å¤Î \f(CW\*(C`Default_Entry\*(C'\fR ¹Ô¤ò
»È¤¦¤³¤È¤Ç¼Â¹Ô»þ¤Ë¥Ç¥Õ¥©¥ë¥È¤ÎÃͤ«¤éÊѹ¹²Äǽ¤À¡£¤½¤Î¸ú²Ì¤ÎµÚ¤ÖÈϰϤϡ¢
Ǥ°Õ¤Î¥Û¥¹¥È¤Î¤¹¤Ù¤Æ¤Î¥æ¡¼¥¶¤Ë¤¹¤ë¤³¤È¤â¤Ç¤­¤ë¤·¡¢¤¢¤ëÆÃÄê¤Î¥Û¥¹¥È¤Î
¤¹¤Ù¤Æ¤Î¥æ¡¼¥¶¡¢¤¢¤ëÆÃÄê¤Î¥æ¡¼¥¶¡¢¤¢¤ëÆÃÄê¤Î¥³¥Þ¥ó¥É¡¢
¤¢¤ëÆÃÄê¤Î¥æ¡¼¥¶¤È¤·¤Æ¼Â¹Ô¤¹¤ë¥³¥Þ¥ó¥É¤Ë¸ÂÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë¡£
µ¤¤òÉÕ¤±¤Æ¤Û¤·¤¤¤Î¤Ï¡¢¥³¥Þ¥ó¥É¤Ë¸ÂÄꤷ¤¿ Defaults ¹Ô¤Ë
¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤Þ¤Ç½ñ¤¯¤³¤È¤¬¤Ç¤­¤Ê¤¤¤³¤È¤À¡£°ú¤­¿ô¤ò»ØÄꤹ¤ëɬÍפ¬
¤¢¤ë¾ì¹ç¤Ï¡¢\f(CW\*(C`Cmnd_Alias\*(C'\fR ¤òÄêµÁ¤·¤Æ¡¢Âå¤ï¤ê¤Ë¤½¤ì¤ò
»²¾È¤¹¤ì¤Ð¤è¤¤¡£
.PP
.Vb 5
\& Default_Type ::= \*(AqDefaults\*(Aq |
\&                  \*(AqDefaults\*(Aq \*(Aq@\*(Aq Host_List |
\&                  \*(AqDefaults\*(Aq \*(Aq:\*(Aq User_List |
\&                  \*(AqDefaults\*(Aq \*(Aq!\*(Aq Cmnd_List |
\&                  \*(AqDefaults\*(Aq \*(Aq>\*(Aq Runas_List
\&
\& Default_Entry ::= Default_Type Parameter_List
\&
\& Parameter_List ::= Parameter |
\&                    Parameter \*(Aq,\*(Aq Parameter_List
\&
\& Parameter ::= Parameter \*(Aq=\*(Aq Value |
\&               Parameter \*(Aq+=\*(Aq Value |
\&               Parameter \*(Aq\-=\*(Aq Value |
\&               \*(Aq!\*(Aq* Parameter
.Ve
.PP
¥Ñ¥é¥á¡¼¥¿¤Ï\fB¥Õ¥é¥°\fR¡¢\fBÀ°¿ôÃÍ\fR¡¢\fBʸ»úÎó\fR¡¢\fB¥ê¥¹¥È\fR ¤Î
¤É¤ì¤Ç¤â¤è¤¤¡£¥Õ¥é¥°¤ÏÍפ¹¤ë¤Ë¥Ö¡¼¥ê¥¢¥ó (¿¿µ¶ÃÍ) ¤Ç¤¢¤ê¡¢'!' ±é»»»Ò¤Ç 
off ¤Ë¤Ç¤­¤ë¡£À°¿ôÃÍ¡¢Ê¸»úÎ󡢥ꥹ¥È¤Î¥Ñ¥é¥á¡¼¥¿¤Ë¤â¡¢¿¿µ¶ÃͤȤ·¤Æ»ÈÍѤ·¤Æ¡¢
¤½¤ì¤ò̵¸ú¤Ë¤Ç¤­¤ë¤â¤Î¤¬¤¤¤¯¤Ä¤«Â¸ºß¤¹¤ë¡£¥Ñ¥é¥á¡¼¥¿¤ÎÃͤ¬Ê£¿ô¤Îñ¸ì¤ò
´Þ¤à¤È¤­¤Ï¡¢Ãͤò¥À¥Ö¥ë¥¯¥ª¡¼¥È (\f(CW\*(C`"\*(C'\fR) ¤Ç°Ï¤à¤È¤è¤¤¡£
Æüìʸ»ú¤Ï¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å (\f(CW\*(C`\e\*(C'\fR) ¤Ç¥¨¥¹¥±¡¼¥×¤¹¤ë¤³¤È¤¬
¤Ç¤­¤ë¡£
.PP
¥ê¥¹¥È¤Ë¤ÏÂåÆþ±é»»»Ò¤¬ \f(CW\*(C`\=\*(C'\fR ¤Î¤Û¤«¤Ë¤â¤¦Æó¤Ä¤¢¤ë¡£
\&\f(CW\*(C`+=\*(C'\fR ¤È \f(CW\*(C`\-=\*(C'\fR ¤Ç¤¢¤ë¡£¤³¤¦¤·¤¿±é»»»Ò¤Ï
¤½¤ì¤¾¤ì¥ê¥¹¥È¤ËÉÕ¤±²Ã¤¨¤¿¤ê¡¢¥ê¥¹¥È¤«¤éºï½ü¤·¤¿¤ê¤¹¤ë¤Î¤Ë»ÈÍѤ¹¤ë¡£
\&\f(CW\*(C`\-=\*(C'\fR ±é»»»Ò¤ò»È¤Ã¤Æ¡¢¥ê¥¹¥È¤Ë¸ºß¤·¤Ê¤¤Í×ÁǤò
¾Ãµî¤·¤è¤¦¤È¤·¤Æ¤â¡¢¥¨¥é¡¼¤Ë¤Ï¤Ê¤é¤Ê¤¤¡£
.PP
Defaults ¹Ô¤Î²òÀϤϡ¢¼¡¤Î½ç½ø¤Ç¹Ô¤ï¤ì¤ë¡£ºÇ½é¤ËÈÆÍÑ¡¢Host¡¢User ¤Î
Defaults ¤¬²òÀϤµ¤ì¡¢¤½¤ì¤«¤é Runas¡¢ºÇ¸å¤Ë¥³¥Þ¥ó¥É¤Î Defaults ¤Î½çÈ֤ˤʤ롣
.PP
Defaults ¹Ô¤Ç»ÈÍѤǤ­¤ë¥Ñ¥é¥á¡¼¥¿¤Î¥ê¥¹¥È¤Ë¤Ä¤¤¤Æ¤Ï¡¢
¡ÖSUDOERS ¤Î¥ª¥×¥·¥ç¥ó¡×¤ò¸æÍ÷¤¤¤¿¤À¤­¤¿¤¤¡£
.Sh "¥æ¡¼¥¶¤ÎÀßÄê (User Specification)"
.IX Subsection "User Specification"
.Vb 2
\& User_Spec ::= User_List Host_List \*(Aq=\*(Aq Cmnd_Spec_List \e
\&               (\*(Aq:\*(Aq Host_List \*(Aq=\*(Aq Cmnd_Spec_List)*
\&
\& Cmnd_Spec_List ::= Cmnd_Spec |
\&                    Cmnd_Spec \*(Aq,\*(Aq Cmnd_Spec_List
\&
\& Cmnd_Spec ::= Runas_Spec? Tag_Spec* Cmnd
\&
\& Runas_Spec ::= \*(Aq(\*(Aq Runas_List? (\*(Aq:\*(Aq Runas_List)? \*(Aq)\*(Aq
\&
\& Tag_Spec ::= (\*(AqNOPASSWD:\*(Aq | \*(AqPASSWD:\*(Aq | \*(AqNOEXEC:\*(Aq | \*(AqEXEC:\*(Aq |
\&               \*(AqSETENV:\*(Aq | \*(AqNOSETENV:\*(Aq )
.Ve
.PP
\&\fB¥æ¡¼¥¶¤ÎÀßÄê\fR¤Ï¡¢¤¢¤ë¥æ¡¼¥¶¤¬»ØÄꤵ¤ì¤¿¥Û¥¹¥È¤Ç (¤É¤Î¥æ¡¼¥¶¤Ë
ÊѿȤ·¤Æ) ¤É¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë¤«¤ò·èÄꤹ¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢
¥³¥Þ¥ó¥É¤Ï \fBroot\fR ¤ËÊѿȤ·¤Æ¼Â¹Ô¤µ¤ì¤ë¤¬¡¢¤³¤ì¤Ï¥³¥Þ¥ó¥É¤´¤È¤Ë
Êѹ¹¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
.PP
¥æ¡¼¥¶¤ÎÀßÄê¤Î´ðËܹ½Â¤¤Ï¡¢¡Ö郎 ¤É¤³¤Ç = (ï¤ËÊѿȤ·¤Æ) ²¿¤ò¡×
¤Ç¤¢¤ë (who where = (as_whom) what)¡£
¹½À®Éôʬ¤Ëʬ¤±¤ÆÀâÌÀ¤·¤è¤¦¡£
.Sh "Runas_Spec (¤É¤Î¥æ¡¼¥¶¤ä¥°¥ë¡¼¥×¤ËÊѿȤǤ­¤ë¤«)"
.IX Subsection "Runas_Spec"
\&\f(CW\*(C`Runas_Spec\*(C'\fR ¤ÏÊѿȤÎÂоݤȤʤë¥æ¡¼¥¶¤ä¥°¥ë¡¼¥×¤ò
µ¬Äꤷ¤Æ¤¤¤ë¡£´°Á´¤Ê·Á¤Î  \f(CW\*(C`Runas_Spec\*(C'\fR ¤Ï¡¢(¾å¤ÇÄêµÁ¤·¤Æ
¤¤¤ë¤è¤¦¤Ë) ¥³¥í¥ó (':') ¤Ç¶èÀÚ¤é¤ì¡¢¥«¥Ã¥³¤Ç°Ï¤Þ¤ì¤¿¡¢Æó¤Ä¤Î 
\&\f(CW\*(C`Runas_List\*(C'\fR ¤«¤é¤Ê¤Ã¤Æ¤¤¤ë¡£
°ì¤ÄÌܤΠ\f(CW\*(C`Runas_List\*(C'\fR ¤Ï¡¢
\&\fBsudo\fR ¤Ç \fB\-u\fR ¥ª¥×¥·¥ç¥ó¤ò»È¤Ã¤¿¤È¤­¤ËÊѿȤǤ­¤ë¥æ¡¼¥¶¤ò
»Ø¤·¤Æ¤¤¤ë¡£ÆóÈÖÌܤÎÊý¤¬µ¬Äꤷ¤Æ¤¤¤ë¤Î¤Ï¡¢\fBsudo\fR ¤Î \fB\-g\fR
¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤Æ»ØÄê¤Ç¤­¤ë¥°¥ë¡¼¥×¤Î¥ê¥¹¥È¤À¡£
ξÊý¤Î \f(CW\*(C`Runas_List\*(C'\fR ¤¬»ØÄꤵ¤ì¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢
¤½¤ì¤¾¤ì¤Î \f(CW\*(C`Runas_List\*(C'\fR ¤Ë¥ê¥¹¥È¤µ¤ì¤Æ¤¤¤ë¥æ¡¼¥¶¤È
¥°¥ë¡¼¥×¤ÎǤ°Õ¤ÎÁȤ߹ç¤ï¤»¤Ç¡¢¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬²Äǽ¤Ç¤¢¤ë¡£
°ì¤ÄÌܤΠ\f(CW\*(C`Runas_List\*(C'\fR ¤À¤±¤¬»ØÄꤵ¤ì¤Æ¤¤¤ë¤È¤­¤Ï¡¢
¥ê¥¹¥ÈÃæ¤Î¤¤¤«¤Ê¤ë¥æ¡¼¥¶¤Ë¤Ç¤âÊѿȤ·¤Æ¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë¤¬¡¢
\&\fB\-g\fR ¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ë¤³¤È¤Ï¤Ç¤­¤Ê¤¤¡£
°ì¤ÄÌܤΠ\f(CW\*(C`Runas_List\*(C'\fR ¤¬¶õ¤Ç¡¢ÆóÈÖÌܤÀ¤±»ØÄꤵ¤ì¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢
\&\fBsudo\fR ¤ò¼Â¹Ô¤¹¤ë¥æ¡¼¥¶¤Î»ñ³Ê¤Ç¡¢¥°¥ë¡¼¥×¤ò
\&\f(CW\*(C`Runas_List\*(C'\fR ¤Ë¥ê¥¹¥È¤µ¤ì¤Æ¤¤¤ëǤ°Õ¤Î¥°¥ë¡¼¥×¤ËÀßÄꤷ¤Æ¡¢
¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£\f(CW\*(C`Runas_Spec\*(C'\fR ¤¬¤Þ¤Ã¤¿¤¯
»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¤È¤­¤Ï¡¢
\&\fBroot\fR ¤È¤·¤Æ¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë¤¬¡¢¥°¥ë¡¼¥×¤ò»ØÄꤹ¤ë¤³¤È¤Ï¤Ç¤­¤Ê¤¤¡£
.PP
\&\f(CW\*(C`Runas_Spec\*(C'\fR ¤Ï¡¢¤½¤ì¤Ë³¤¯¥³¥Þ¥ó¥É¤ËÂФ·¤Æ¥Ç¥Õ¥©¥ë¥È¤ò
Äê¤á¤ë¡£¤½¤ì¤Ï¤É¤¦¤¤¤¦¤³¤È¤«¤È¸À¤¦¤È¡¢¼¡¤Î¤è¤¦¤Ê¥¨¥ó¥È¥ê¤¬¤¢¤Ã¤¿¤È¤·¤è¤¦¡£
.PP
.Vb 1
\& dgb    boulder = (operator) /bin/ls, /bin/kill, /usr/bin/lprm
.Ve
.PP
¥æ¡¼¥¶ \fBdgb\fR ¤Ï \fI/bin/ls\fR, \fI/bin/kill\fR,
\&\fI/usr/bin/lprm\fR ¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤¿¤À¤·¡¢\&\fBoperator\fR 
¤È¤·¤Æ¼Â¹Ô¤Ç¤­¤ë¤À¤±¤À¡£¤¿¤È¤¨¤Ð¡¢¼¡¤Î¤è¤¦¤Ë¤Ç¤¢¤ë¡£
.PP
.Vb 1
\& $ sudo \-u operator /bin/ls
.Ve
.PP
¥¨¥ó¥È¥ê¤Î¸å¤í¤ÎÊý¤Î \f(CW\*(C`Runas_Spec\*(C'\fR ¤òÊѹ¹¤¹¤ë¤³¤È¤â²Äǽ¤À¡£
¾å¤Î¥¨¥ó¥È¥ê¤ò¤³¤ó¤Ê¤Õ¤¦¤Ë½ñ¤­ÊѤ¨¤¿¤È¤·¤è¤¦¡£
.PP
.Vb 1
\& dgb    boulder = (operator) /bin/ls, (root) /bin/kill, /usr/bin/lprm
.Ve
.PP
¤¹¤ë¤È¡¢¥æ¡¼¥¶ \fBdgb\fR ¤Ï¡¢\fI/bin/ls\fR ¤³¤½ \fBoperator\fR ¤È¤·¤Æ¤À¤¬¡¢
\&\fI/bin/kill\fR ¤ä \fI/usr/bin/lprm\fR ¤Ï \fBroot\fR ¤Î»ñ³Ê¤Ç
¼Â¹Ô¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¡£
.PP
\&\fBdgb\fR ¤¬ \f(CW\*(C`/bin/ls\*(C'\fR ¤ò¼Â¹Ô¤¹¤ë¤È¤­¡¢
ÊÑ¿ÈÂоݥ桼¥¶¤È¥°¥ë¡¼¥×¤Î¤É¤Á¤é¤Ç¤â \fBoperator\fR ¤Ë¤Ç¤­¤ë¤è¤¦¤Ë¡¢
¤³¤Îµ­½Ò¤ò³ÈÄ¥¤¹¤ë¤³¤È¤â¤Ç¤­¤ë¡£
.PP
.Vb 2
\& dgb    boulder = (operator : operator) /bin/ls, (root) /bin/kill, \e
\&        /usr/bin/lprm
.Ve
.PP
¼¡¤ÎÎã¤Ç¤Ï¡¢¥æ¡¼¥¶ \fBtcm\fR ¤¬ ¥â¥Ç¥à¤Î¥Ç¥Ð¥¤¥¹¥Õ¥¡¥¤¥ë¤Ë¥¢¥¯¥»¥¹¤¹¤ë
¥³¥Þ¥ó¥É¤ò dialer ¥°¥ë¡¼¥×¤È¤·¤Æ¼Â¹Ô¤Ç¤­¤ë¤è¤¦¤Ë¤·¤Æ¤¤¤ë¡£
¤³¤ÎÎã¤Ç¤Ï¡¢¥°¥ë¡¼¥×¤·¤«»ØÄê¤Ç¤­¤Ê¤¤¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£¥³¥Þ¥ó¥É¤Ï
¥æ¡¼¥¶ \fBtcm\fR ¤Î»ñ³Ê¤Ç¼Â¹Ô¤µ¤ì¤ë¤Î¤Ç¤¢¤ë¡£
.PP
.Vb 2
\& tcm    boulder = (:dialer) /usr/bin/tip, /usr/bin/cu, \e
\&        /usr/local/bin/minicom
.Ve
.Sh "Tag_Spec"
.IX Subsection "Tag_Spec"
¥³¥Þ¥ó¥É¤Ï 0 ¸Ä°Ê¾å¤Î¥¿¥°¤òȼ¤¦¤³¤È¤¬¤Ç¤­¤ë¡£¥¿¥°¤ÎÃͤȤ·¤Æ¤Ï¡¢ 
\&\f(CW\*(C`NOPASSWD\*(C'\fR, \f(CW\*(C`PASSWD\*(C'\fR,
\&\f(CW\*(C`NOEXEC\*(C'\fR, \f(CW\*(C`EXEC\*(C'\fR,
\&\f(CW\*(C`SETENV\*(C'\fR, \f(CW\*(C`NOSETENV\*(C'\fR ¤ÎÏ»¤Ä¤¬²Äǽ¤Ç
¤¢¤ë¡£¤¢¤ë \f(CW\*(C`Cmnd\*(C'\fR ¤Ë¥¿¥°¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢
\&\f(CW\*(C`Cmnd_Spec_List\*(C'\fR Ãæ¤Î¤½¤ì°Ê¸å¤Î 
\&\f(CW\*(C`Cmnd\*(C'\fR ¤Ï¡¢È¿ÂФΰÕÌ£¤ò»ý¤Ä¥¿¥°¤Ë¤è¤Ã¤ÆÊѹ¹¤µ¤ì¤Ê¤¤¤«¤®¤ê¡¢
¤½¤Î¥¿¥°¤ò·Ñ¾µ¤¹¤ë (¤¹¤Ê¤ï¤Á¡¢\f(CW\*(C`PASSWD\*(C'\fR ¤Ï 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¤ò¾å½ñ¤­¤·¡¢\f(CW\*(C`NOEXEC\*(C'\fR ¤Ï 
\&\f(CW\*(C`EXEC\*(C'\fR ¤ò¾å½ñ¤­¤¹¤ë¤ï¤±¤À)¡£
.PP
\fI\s-1NOPASSWD\s0 ¤È \s-1PASSWD\s0\fR
.IX Subsection "NOPASSWD and PASSWD"
.PP
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢\fBsudo\fR ¤Ï¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ëÁ°¤Ë¡¢
¥æ¡¼¥¶¤¬ËܿͤǤ¢¤ë¤³¤È¤ò¾ÚÌÀ¤¹¤ë¤è¤¦¤Ëµá¤á¤ë¡£¤³¤Î¿¶Éñ¤¤¤Ï 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤Ë¤è¤Ã¤ÆÊѹ¹¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
\&\f(CW\*(C`Runas_Spec\*(C'\fR ¤ÈƱÍÍ¡¢\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤â 
\&\f(CW\*(C`Cmnd_Spec_List\*(C'\fR Ãæ¤Î¤½¤ì¤Ë³¤¯¥³¥Þ¥ó¥É¤ËÂФ·¤Æ
¥Ç¥Õ¥©¥ë¥È¤òÄê¤á¤ë¡£\f(CW\*(C`PASSWD\*(C'\fR ¤ÎƯ¤­¤ÏÈ¿ÂФǤ¢¤ê¡¢
¿¶Éñ¤¤¤ò¸µ¤ËÌᤷ¤¿¤¤¤È¤­¤Ë»È¤¨¤ë¡£¤¿¤È¤¨¤Ð¡¢
.PP
.Vb 1
\& ray    rushmore = NOPASSWD: /bin/kill, /bin/ls, /usr/bin/lprm
.Ve
.PP
¤È¤¹¤ì¤Ð¡¢¥æ¡¼¥¶ \fBray\fR ¤Ï¥Þ¥·¥ó rushmore ¾å¤Çǧ¾Ú¤ò¤·¤Ê¤¤¤Ç¤â 
\&\fBroot\fR ¤È¤·¤Æ \fI/bin/kill\fR, \fI/bin/ls\fR,
\&\fI/usr/bin/lprm\fR ¤ò¼Â¹Ô¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¡£¤â¤· \fBray\fR ¤¬
¥Ñ¥¹¥ï¡¼¥É¤Ê¤·¤Ç¼Â¹Ô¤Ç¤­¤ë¥³¥Þ¥ó¥É¤ò \fI/bin/kill\fR ¤À¤±¤Ë
¹Ê¤ê¤¿¤¤¤Î¤Ê¤é¡¢¥¨¥ó¥È¥ê¤Ï¤³¤¦¤Ê¤ë¤À¤í¤¦¡£
.PP
.Vb 1
\& ray    rushmore = NOPASSWD: /bin/kill, PASSWD: /bin/ls, /usr/bin/lprm
.Ve
.PP
¤¿¤À¤·¡¢¥æ¡¼¥¶¤¬ \fIexempt_group\fR ¥ª¥×¥·¥ç¥ó¤Ç»ØÄꤵ¤ì¤Æ¤¤¤ë¥°¥ë¡¼¥×¤Ë
°¤¹¤ë¾ì¹ç¤Ï¡¢\f(CW\*(C`PASSWD\*(C'\fR ¥¿¥°¤¬¸ú²Ì¤ò»ý¤¿¤Ê¤¤¤³¤È¤Ë
Ãí°Õ¤·¤Æ¤Û¤·¤¤¡£
.PP
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢¸½ºß»ÈÍÑÃæ¤Î¥Û¥¹¥È¤Ë´Ø¤¹¤ë¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤Î¤¦¤Á¤Ë 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬»ØÄꤵ¤ì¤Æ¤¤¤ë¤â¤Î¤¬°ì¤Ä¤Ç¤â¤¢¤ì¤Ð¡¢
¤½¤Î¥æ¡¼¥¶¤Ï¥Ñ¥¹¥ï¡¼¥É¤Ê¤·¤Ç \f(CW\*(C`sudo \-l\*(C'\fR ¤ò¼Â¹Ô¤Ç¤­¤ë¡£
¤Ê¤ª¡¢¥æ¡¼¥¶¤¬¥Ñ¥¹¥ï¡¼¥É¤Ê¤·¤Ç \f(CW\*(C`sudo \-v\*(C'\fR ¤ò¼Â¹Ô¤Ç¤­¤ë¤Î¤Ï¡¢
¸½ºß»ÈÍÑÃæ¤Î¥Û¥¹¥È¤Ë´Ø¤¹¤ë¤½¤Î¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤Î¤¹¤Ù¤Æ¤Ç
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬À¸¤­¤Æ¤¤¤ë¤È¤­¤Î¤ß¤Ç¤¢¤ë¡£¤³¤ÎÆ°ºî¤Ï¡¢
\&\fIverifypw\fR ¤ä \fIlistpw\fR ¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤ÆÊѹ¹¤Ç¤­¤ë¡£
.PP
\fI\s-1NOEXEC\s0 ¤È \s-1EXEC\s0\fR
.IX Subsection "NOEXEC and EXEC"
.PP
\&\fBsudo\fR ¤¬ \fInoexec\fR ¥µ¥Ý¡¼¥È¤Ä¤­¤Ç¥³¥ó¥Ñ¥¤¥ë¤µ¤ì¡¢
²¼¤Ç²ÔƯ¤·¤Æ¤¤¤ë¥ª¥Ú¥ì¡¼¥Æ¥£¥ó¥°¥·¥¹¥Æ¥à¤¬¤½¤ì¤ËÂбþ¤·¤Æ¤¤¤ë¾ì¹ç¡¢
\&\f(CW\*(C`NOEXEC\*(C'\fR ¥¿¥°¤òÍøÍѤ¹¤ì¤Ð¡¢Æ°Åª¤Ë¥ê¥ó¥¯¤µ¤ì¤¿¼Â¹Ô¥Õ¥¡¥¤¥ë¤¬
¤½¤³¤«¤é¤µ¤é¤Ë¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤Î¤òËɤ°¤³¤È¤¬¤Ç¤­¤ë¡£
.PP
¼¡¤ÎÎã¤Ç¤Ï¡¢¥æ¡¼¥¶ \fBaaron\fR ¤Ï \fI/usr/bin/more\fR ¤È 
\&\fI/usr/bin/vi\fR ¤ò¼Â¹Ô¤Ç¤­¤ë¤¬¡¢¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤ÏÍøÍѤǤ­¤Ê¤¤¡£
.PP
.Vb 1
\& aaron  shanty = NOEXEC: /usr/bin/more, /usr/bin/vi
.Ve
.PP
\&\f(CW\*(C`NOEXEC\*(C'\fR ¤¬¤É¤ó¤Ê¤Õ¤¦¤ËƯ¤¯¤Î¤«¡¢¤ª»È¤¤¤Î¥·¥¹¥Æ¥à¤Ç
ÍøÍѤǤ­¤ë¤«¤É¤¦¤«¡¢¤Ê¤É¤Ë¤Ä¤¤¤Æ¤µ¤é¤Ë¾Ü¤·¤¯ÃΤꤿ¤«¤Ã¤¿¤é¡¢
¡Ö¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤òËɻߤ¹¤ë¡×¤Î¥»¥¯¥·¥ç¥ó¤ò¸æÍ÷¤Ë¤Ê¤Ã¤Æ¤¤¤¿¤À¤­¤¿¤¤¡£
.PP
\fI\s-1SETENV\s0 ¤È \s-1NOSETENV\s0\fR
.IX Subsection "SETENV and NOSETENV"
.PP
¾åµ­¤Î¥¿¥°¤Ï \fIsetenv\fR ¥ª¥×¥·¥ç¥ó¤ÎÃͤò¥³¥Þ¥ó¥É¤´¤È¤ËÊѹ¹¤¹¤ë¡£
Ãí°Õ¤¹¤Ù¤­¤Ï¡¢¤¢¤ë¥³¥Þ¥ó¥É¤ËÂФ·¤Æ \f(CW\*(C`SETENV\*(C'\fR ¤¬
ÀßÄꤵ¤ì¤Æ¤¤¤ë¤È¡¢¥³¥Þ¥ó¥É¥é¥¤¥ó¤«¤éÀßÄꤹ¤ë¤É¤ó¤Ê´Ä¶­ÊÑ¿ô¤â \fIenv_check\fR,
\&\fIenv_delete\fR, \fIenv_keep\fR ¤Ë¤è¤ëµ¬À©¤ò¼õ¤±¤Ê¤¤¤È¤¤¤¦¤³¤È¤Ç¤¢¤ë¡£
¤À¤«¤é¡¢¤½¤¦¤·¤¿·Á¤Ç´Ä¶­ÊÑ¿ô¤òÀßÄꤹ¤ë¤³¤È¤òµö²Ä¤¹¤ë¤Î¤Ï¡¢
¿®ÍѤǤ­¤ë¥æ¡¼¥¶¤À¤±¤Ë¸Â¤ë¤Ù¤­¤À¡£¤Ê¤ª¡¢¥Þ¥Ã¥Á¤¹¤ë¥³¥Þ¥ó¥É¤¬
\&\fB\s-1ALL\s0\fR ¤À¤Ã¤¿¾ì¹ç¤Ï¡¢°ÅÌۤΤ¦¤Á¤Ë \f(CW\*(C`SETENV\*(C'\fR ¥¿¥°¤¬
¤½¤Î¥³¥Þ¥ó¥É¤ËÉÕ¤±¤é¤ì¤ë¤¬¡¢¤³¤Î¥Ç¥Õ¥©¥ë¥È¤ÎÆ°ºî¤Ï
\&\f(CW\*(C`UNSETENV\*(C'\fR ¥¿¥°¤ò»È¤¨¤ÐÂǤÁ¾Ã¤¹¤³¤È¤¬¤Ç¤­¤ë¡£
.Sh "¥ï¥¤¥ë¥É¥«¡¼¥É"
.IX Subsection "Wildcards"
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ç¤Ï¡¢¥Û¥¹¥È̾¡¢¥³¥Þ¥ó¥É¥é¥¤¥ó¤Î¥Ñ¥¹Ì¾¡¢
¥³¥Þ¥ó¥É¥é¥¤¥ó¤Î°ú¤­¿ô¤Ë¥·¥§¥ë·Á¼°¤Î¥ï¥¤¥ë¥É¥«¡¼¥É (¥á¥¿Ê¸»ú¤È¤«
glob ¥­¥ã¥é¥¯¥¿¤È¤â¸À¤¦) ¤¬»ÈÍѤǤ­¤ë¡£¥ï¥¤¥ë¥É¥«¡¼¥É¤Î¥Þ¥Ã¥Á¥ó¥°¤Ï
\&\fB\s-1POSIX\s0\fR ¤Î \fIglob\fR\|(3) ¤È \fIfnmatch\fR\|(3)
¥ë¡¼¥Æ¥£¥ó¤òÍѤ¤¤Æ¹Ô¤ï¤ì¤ë¡£\fB°Ê²¼¤Î¤â¤Î¤ÏÀµµ¬É½¸½¤Ç¤Ï¤Ê¤¤\fR¤³¤È¤Ë
Ãí°Õ¤·¤Æ¤Û¤·¤¤¡£
.ie n .IP "\*(C`*\*(C'" 8
.el .IP "\f(CW\*(C`*\*(C'\fR" 8
.IX Item "*"
¥¼¥í¸Ä°Ê¾å¤ÎǤ°Õ¤Îʸ»ú¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£
.ie n .IP "\*(C`?\*(C'" 8
.el .IP "\f(CW\*(C`?\*(C'\fR" 8
.IX Item "?"
Ǥ°Õ¤Î°ìʸ»ú¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£
.ie n .IP "\*(C`[...]\*(C'" 8
.el .IP "\f(CW\*(C`[...]\*(C'\fR" 8
.IX Item "[...]"
»ØÄꤵ¤ì¤¿ÈϰϤÎǤ°Õ¤Î°ìʸ»ú¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£
.ie n .IP "\*(C`[!...]\*(C'" 8
.el .IP "\f(CW\*(C`[!...]\*(C'\fR" 8
.IX Item "[!...]"
»ØÄꤵ¤ì¤¿ÈÏ°Ï\fB°Ê³°\fR¤ÎǤ°Õ¤Î°ìʸ»ú¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£
.ie n .IP "\*(C`\ex\*(C'" 8
.el .IP "\f(CW\*(C`\ex\*(C'\fR" 8
.IX Item "x"
\&\*(L"x\*(R" ¤¬¤É¤ó¤Êʸ»ú¤Ç¤¢¤Ã¤Æ¤â¡¢\*(L"x\*(R" ¤½¤Î¤â¤Î¤È¤·¤Æ
ɾ²Á¤¹¤ë¡£¤³¤ì¤Ï \*(L"*\*(R", \*(L"?\*(R", \*(L"[\*(R", \*(L"}\*(R" ¤È¤¤¤Ã¤¿
Æüìʸ»ú¤ò¥¨¥¹¥±¡¼¥×¤¹¤ë¤¿¤á¤Ë»ÈÍѤ¹¤ë¡£
.PP
»ÈÍÑ¥·¥¹¥Æ¥à¤Î \fIglob\fR\|(3) ¤ä \fIfnmatch\fR\|(3) ´Ø¿ô¤¬
\&\s-1POSIX\s0 ¤Îʸ»ú¥¯¥é¥¹¤ËÂбþ¤·¤Æ¤¤¤ë¤Ê¤é¡¢Ê¸»ú¥¯¥é¥¹¤â»ÈÍѤǤ­¤ë¡£
¤¿¤À¤·¡¢\f(CW\*(Aq:\*(Aq\fR ʸ»ú¤Ï¡¢\fIsudoers\fR ¤ÇÆÃÊ̤ʰÕÌ£¤ò
»ý¤Ã¤Æ¤¤¤ë¤Î¤Ç¡¢¥¨¥¹¥±¡¼¥×¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£°ìÎã¤ò¾å¤²¤ë¤È¡¢
.PP
.Vb 1
\&    /bin/ls [[\e:alpha\e:]]*
.Ve
.PP
¾åµ­¤Ï¡¢Ê¸»ú¤Ç»Ï¤Þ¤ë¤É¤ó¤Ê¥Õ¥¡¥¤¥ë̾¤Ë¤â¥Þ¥Ã¥Á¤¹¤ë¤À¤í¤¦¡£
.PP
¥³¥Þ¥ó¥É¤Î¥Ñ¥¹Ì¾¤Ë»È¤ï¤ì¤¿¥ï¥¤¥ë¥É¥«¡¼¥É¤Ï¥Õ¥©¥ï¡¼¥É¥¹¥é¥Ã¥·¥å ('/') 
¤Ë\fB¥Þ¥Ã¥Á¤·¤Ê¤¤\fR¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£¤À¤¬¡¢¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤È¤Î
¥Þ¥Ã¥Á¥ó¥°¤Ç¤Ï¡¢¥ï¥¤¥ë¥É¥«¡¼¥É¤Ï¥¹¥é¥Ã¥·¥å¤È\fB¤·¤Ã¤«¤ê¥Þ¥Ã¥Á¤¹¤ë\fR¡£
¤½¤³¤Ç¡¢
.PP
.Vb 1
\&    /usr/bin/*
.Ve
.PP
¤È¤¤¤¦¥³¥Þ¥ó¥É¥Ñ¥¹¤Ï¡¢\fI/usr/bin/who\fR ¤È¥Þ¥Ã¥Á¤¹¤ë¤¬¡¢
\&\fI/usr/bin/X11/xterm\fR ¤È¤Ï¥Þ¥Ã¥Á¤·¤Ê¤¤¤³¤È¤Ë¤Ê¤ë¡£
.Sh "¥ï¥¤¥ë¥É¥«¡¼¥É¡¦¥ë¡¼¥ë¤ÎÎã³°"
.IX Subsection "Exceptions to wildcard rules"
¾åµ­¥ë¡¼¥ë¤Ë¤Ï¼¡¤ÎÎã³°¤¬¤¢¤ë¡£
.ie n .IP """""" 8
.el .IP "\f(CW``''\fR" 8
.IX Item """"""
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î¥¨¥ó¥È¥ê¤Ë¤ª¤¤¤Æ¡¢¶õʸ»úÎó \f(CW""\fR ¤¬Í£°ì
¤Î¥³¥Þ¥ó¥É¥é¥¤¥ó°ú¤­¿ô¤À¤Ã¤¿¾ì¹ç¤Ï¡¢¤½¤Î¥³¥Þ¥ó¥É¤Ë\fB¤¤¤«¤Ê¤ë\fR°ú¤­¿ô¤òÉÕ
¤±¤Æ¼Â¹Ô¤¹¤ë¤³¤È¤âµö¤µ¤ì¤Ê¤¤¤È¤¤¤¦¤³¤È¤Ç¤¢¤ë¡£
.Sh "sudoers ¤Ë¾¤Î¥Õ¥¡¥¤¥ë¤ò¥¤¥ó¥¯¥ë¡¼¥É¤¹¤ë"
.IX Subsection "Including other files from within sudoers"
\&\f(CW\*(C`#include\*(C'\fR Ì¿Îá¤ä \f(CW\*(C`#includedir\*(C'\fR Ì¿Îá¤ò
»È¤¨¤Ð¡¢¸½ºß²òÀÏÃæ¤Î \fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ë³°Éô¤Ë¤¢¤ë¤Û¤«¤Î
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ò¥¤¥ó¥¯¥ë¡¼¥É¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
.PP
¤³¤ÎÊýË¡¤ò»È¤¨¤Ð¡¢¤¿¤È¤¨¤Ð¡¢¥µ¥¤¥ÈÁ´ÂΤǻÈÍѤ¹¤ë \fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î
¤Û¤«¤Ë¡¢¥Þ¥·¥ó¤´¤È¤Î¥í¡¼¥«¥ë¤Ê \fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ò»ý¤Ä¤³¤È¤¬¤Ç¤­¤ë¡£
¤³¤³¤Ç¤Ï¡¢¥µ¥¤¥ÈÁ´ÂΤΠ\fIsudoers\fR ¤ò \fI/etc/sudoers\fR ¤È¤·¡¢
¥Þ¥·¥ó¤´¤È¤ÎÊý¤Ï \fI/etc/sudoers.local\fR ¤È¤¹¤ë¤³¤È¤Ë¤·¤è¤¦¡£
\&\fI/etc/sudoers\fR ¤Ë \fI/etc/sudoers.local\fR ¤ò¥¤¥ó¥¯¥ë¡¼¥É¤¹¤ë¤Ë¤Ï¡¢
\&\fI/etc/sudoers\fR Ãæ¤Ë¼¡¤Î¹Ô¤ò½ñ¤­¹þ¤à¡£
.Sp
.RS 4
\&\f(CW\*(C`#include /etc/sudoers.local\*(C'\fR
.RE
.PP
\&\fBsudo\fR ¤Ï²òÀÏÃ椳¤Î¹Ô¤Ë½Ð²ñ¤¦¤È¡¢¥«¥ì¥ó¥È¥Õ¥¡¥¤¥ë
(\fI/etc/sudoers\fR ¤À) ¤Î½èÍý¤ò°ì»þÃæ»ß¤·¡¢½èÍý¤ÎÂоݤò
\&\fI/etc/sudoers.local\fR ¤ËÀÚ¤êÂؤ¨¤ë¡£¤½¤·¤Æ¡¢
\&\fI/etc/sudoers.local\fR ¤ÎËöÈø¤Þ¤Ç㤷¤¿¤é¡¢\fI/etc/sudoers\fR ¤Î
»Ä¤ê¤ò½èÍý¤¹¤ë¤Î¤À¡£¥¤¥ó¥¯¥ë¡¼¥É¤µ¤ì¤¿¥Õ¥¡¥¤¥ë¤¬¤µ¤é¤Ë¾¤Î¥Õ¥¡¥¤¥ë¤ò
¥¤¥ó¥¯¥ë¡¼¥É¤·¤Æ¤â¤è¤¤¡£¥¤¥ó¥¯¥ë¡¼¥È¤Î¥Í¥¹¥È¤Ë¤Ï 128 ¥Õ¥¡¥¤¥ë¤Þ¤Ç¤È¤¤¤¦
¥Ï¡¼¥É¡¦¥ê¥ß¥Ã¥È¤¬¤¢¤Ã¤Æ¡¢¥¤¥ó¥¯¥ë¡¼¥É¥Õ¥¡¥¤¥ë¤Î¥ë¡¼¥×¤¬µ¯¤­¤Ê¤¤¤è¤¦¤Ë
¤Ê¤Ã¤Æ¤¤¤ë¡£
.PP
¥Õ¥¡¥¤¥ë̾¤Ë¤Ï \f(CW%h\fR ¥¨¥¹¥±¡¼¥×¤¬»È¤¨¤ë¡£¤³¤ì¤Ï¥Û¥¹¥È̾¤Îû½Ì·Á¤ò
¼¨¤·¤Æ¤¤¤ë¡£¤¿¤È¤¨¤Ð¡¢¥Þ¥·¥ó¤Î¥Û¥¹¥È̾¤¬ \*(L"xerxes\*(R" ¤Î¤È¤­¡¢
.PP
\&\f(CW\*(C`#include /etc/sudoers.%h\*(C'\fR
.PP
¤È½ñ¤±¤Ð¡¢\fBsudo\fR ¤Ï¥Õ¥¡¥¤¥ë \fI/etc/sudoers.xerxes\fR ¤ò¥¤¥ó¥¯¥ë¡¼¥É
¤¹¤ë¤³¤È¤Ë¤Ê¤ë¡£
.PP
\&\f(CW\*(C`#includedir\*(C'\fR Ì¿Îá¤ò»È¤¨¤Ð¡¢\fIsudo.d\fR ¥Ç¥£¥ì¥¯¥È¥ê¤ò
ºî¤Ã¤Æ¤ª¤¤¤Æ¡¢¥·¥¹¥Æ¥à¤Î¥Ñ¥Ã¥±¡¼¥¸´ÉÍý¼Ô¤¬¥Ñ¥Ã¥±¡¼¥¸¤ò¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë²áÄø¤Ç
\&\fIsudoers\fR ¤Î¥ë¡¼¥ë¤òµ­¤·¤¿¥Õ¥¡¥¤¥ë¤ò¤½¤³¤ËÆþ¤ì¤Æ¤ä¤ë¡¢¤È¤¤¤Ã¤¿¤³¤È¤¬
²Äǽ¤Ë¤Ê¤ë¡£¤¿¤È¤¨¤Ð¡¢¼¡¤Î¤è¤¦¤Ë½ñ¤¯¤È¡¢
.PP
\&\f(CW\*(C`#includedir /etc/sudoers.d\*(C'\fR
.PP
\&\fBsudo\fR ¤Ï \fI/etc/sudoers.d\fR ¤Ë¤¢¤ë¥Õ¥¡¥¤¥ë¤ò°ì¤Ä¤Å¤ÄÆɤ߹þ¤à¡£
¤¿¤À¤·¡¢ËöÈø¤¬ \f(CW\*(C`~\*(C'\fR ¤À¤Ã¤¿¤ê¡¢\f(CW\*(C`.\*(C'\fR ʸ»ú¤ò
´Þ¤ó¤Ç¤¤¤¿¤ê¤¹¤ë¥Õ¥¡¥¤¥ë̾¤Ï¥¹¥­¥Ã¥×¤¹¤ë¤¬¡¢¤³¤ì¤Ï ¥Ñ¥Ã¥±¡¼¥¸¥Þ¥Í¡¼¥¸¥ã¤ä
¥¨¥Ç¥£¥¿¤¬ºî¤Ã¤¿¡¢¥Æ¥ó¥Ý¥é¥ê¥Õ¥¡¥¤¥ë¤ä¥Ð¥Ã¥¯¥¢¥Ã¥×¥Õ¥¡¥¤¥ë¤òÆɤ߹þ¤à¤è¤¦¤Ê
ÌäÂê¤òµ¯¤³¤µ¤Ê¤¤¤¿¤á¤Ç¤¢¤ë¡£¥Õ¥¡¥¤¥ë¤Ï¼­½ñ½ç¤Ë¥½¡¼¥È¤µ¤ì¤Æ¡¢²òÀϤµ¤ì¤ë¡£
¤¹¤Ê¤ï¤Á¡¢\fI/etc/sudoers.d/01_first\fR ¤¬ \fI/etc/sudoers.d/10_second\fR
¤è¤êÁ°¤Ë²òÀϤµ¤ì¤ë¤È¤¤¤¦¤³¤È¤À¡£¥½¡¼¥È¤Ï¼­½ñ½ç¤Ç¤¢¤Ã¤Æ¡¢¿ôÃͤνç¤Ç¤Ï
¤Ê¤¤¤Î¤Ç¡¢\fI/etc/sudoers.d/1_whoops\fR ¤È¤¤¤¦¥Õ¥¡¥¤¥ë¤¬¤¢¤Ã¤Æ¤â¡¢
\&\fI/etc/sudoers.d/10_second\fR \fB¤è¤ê¸å¤Ç\fR¥í¡¼¥É¤µ¤ì¤ë¤³¤È¤Ë
Ãí°Õ¤·¤Æ¤Û¤·¤¤¡£¥Õ¥¡¥¤¥ë̾¤ÎÀèƬ¤ò 0 ¤ÇËä¤á¤Æ¿ô»ú¤Î·å¤ò·¤¨¤ì¤Ð¡¢
¤³¤¦¤·¤¿ÌäÂê¤ò²óÈò¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
.PP
µ¤¤òÉÕ¤±¤Æ¤Û¤·¤¤¤¬¡¢\f(CW\*(C`#include\*(C'\fR ¤Ç¥¤¥ó¥¯¥ë¡¼¥É¤µ¤ì¤¿
¥Õ¥¡¥¤¥ë¤È¤Ï°ã¤Ã¤Æ (ÌõÃí: \fBvisudo\fR ¤Ï \fI/etc/sudoers\fR ¤ò
ÊÔ½¸¤¹¤ë¤È¤­¡¢\f(CW\*(C`#include\*(C'\fR ¤Ç»ØÄꤷ¤¿¥Õ¥¡¥¤¥ë¤¬¤¢¤ì¤Ð¡¢
³¤±¤Æ¤½¤ì¤âÊÔ½¸¤¹¤ë)¡¢
\&\fBvisudo\fR ¤¬ \f(CW\*(C`#includedir\*(C'\fR ¤Ç»ØÄꤷ¤¿¥Ç¥£¥ì¥¯¥È¥ê¤Î
¥Õ¥¡¥¤¥ë¤Þ¤ÇÊÔ½¸¤¹¤ë¤Î¤Ï¡¢¥·¥ó¥¿¥¯¥¹¥¨¥é¡¼¤ò´Þ¤à¤â¤Î¤¬¤¢¤ë¤È¤­¤À¤±¤Ç¤¢¤ë¡£
¤È¤Ï¸À¤¨¡¢\fBvisudo\fR ¤ò \f(CW\*(C`\-f\*(C'\fR ¥ª¥×¥·¥ç¥óÉÕ¤­¤Ç¼Â¹Ô¤·¤Æ¡¢
¥Ç¥£¥ì¥¯¥È¥êÃæ¤Î¥Õ¥¡¥¤¥ë¤òľÀÜÊÔ½¸¤¹¤ë¤³¤È¤Ï²Äǽ¤À¡£
.Sh "¤Û¤«¤ÎÆüìʸ»ú¤ÈͽÌó¸ì"
.IX Subsection "Other special characters and reserved words"
¥Ñ¥¦¥ó¥Éµ­¹æ ('#') ¤Ï¥³¥á¥ó¥È¤ò¼¨¤¹¤Î¤Ë»ÈÍѤµ¤ì¤ë (Îã³°¤Ï¡¢#include Ì¿Îá¤Î
°ìÉô¤Ç¤¢¤ë¤È¤­¤ä¡¢¥æ¡¼¥¶Ì¾¤Ë´ØÏ¢¤·¤Æ¸½¤ì¡¢¤½¤Î¸å¤Ë°ì¸Ä°Ê¾å¤Î¿ô»ú¤¬
³¤¯¤È¤­¤Ç¤¢¤ê¡¢¸å¼Ô¤Î¾ì¹ç¤Ï uid ¤È¸«¤Ê¤µ¤ì¤ë)¡£¥³¥á¥ó¥Èµ­¹æ¤È
¤½¤ì¤Ë³¤¯¥Æ¥­¥¹¥È¤Ï¡¢¹ÔËö¤Ë¤¤¤¿¤ë¤Þ¤Ç̵»ë¤µ¤ì¤ë¡£
.PP
ͽÌó¸ì \fB\s-1ALL\s0\fR ¤ÏÁȹþ¤ß¤Î¥¨¥¤¥ê¥¢¥¹¤Ç¤¢¤ê¡¢²¿¤ËÂФ·¤Æ¤Ç¤â
¥Þ¥Ã¥Á¤¹¤ë¡£\fB\s-1ALL\s0\fR ¤Ï¡¢\f(CW\*(C`Cmnd_Alias\*(C'\fR,
\&\f(CW\*(C`User_Alias\*(C'\fR, \f(CW\*(C`Runas_Alias\*(C'\fR,
\&\f(CW\*(C`Host_Alias\*(C'\fR ¤òÂå¤ï¤ê¤Ë»È¤¨¤ë¤È¤³¤í¤Ê¤é¡¢¤É¤³¤Ç¤â
»ÈÍѤǤ­¤ë¡£\fB\s-1ALL\s0\fR ¤È¤¤¤¦Ì¾Á°¤Î¥¨¥¤¥ê¥¢¥¹¤ò¼«Ê¬¤ÇÄêµÁ¤·¤è¤¦¤È
¤·¤Æ¤Ï¤¤¤±¤Ê¤¤¡£Áȹþ¤ß¤Î¥¨¥¤¥ê¥¢¥¹¤ÎÊý¤¬¡¢¼«Ê¬¤Çºî¤Ã¤¿¥¨¥¤¥ê¥¢¥¹¤è¤ê
Í¥À褷¤Æ»È¤ï¤ì¤ë¤«¤é¤À¡£\fB\s-1ALL\s0\fR ¤Î»ÈÍÑ¤Ë¤Ï´í¸±¤¬È¼¤¦¤³¤È¤¬
¤¢¤ë¤Î¤ò˺¤ì¤Ê¤¤¤Ç¤¤¤¿¤À¤­¤¿¤¤¡£¤Ê¤¼¤Ê¤é¡¢\fB\s-1ALL\s0\fR ¤ò
¥³¥Þ¥ó¥É¤Ë´Ø¤·¤Æ»È¤¦¤È¡¢¥æ¡¼¥¶¤Ë¥·¥¹¥Æ¥à¾å¤Î\fB¤É¤ó¤Ê\fR¥³¥Þ¥ó¥É¤Ç¤â
¼Â¹Ô¤¹¤ë¤³¤È¤òµö¤·¤Æ¤·¤Þ¤¦¤«¤é¤Ç¤¢¤ë¡£
.PP
¥¨¥¯¥¹¥¯¥é¥á¡¼¥·¥ç¥ó¥Þ¡¼¥¯ ('!') ¤Ï¡¢¥¨¥¤¥ê¥¢¥¹¤Ç¤â 
\&\f(CW\*(C`Cmnd\*(C'\fR ¤ÎÁ°¤Ç¤âÏÀÍý \fInot\fR ±é»»»Ò¤È¤·¤Æ»ÈÍѤǤ­¤ë¡£
¤³¤ì¤Ë¤è¤Ã¤Æ¤¢¤ëÃͤò½ü³°¤¹¤ë¤³¤È¤¬²Äǽ¤À¡£¤·¤«¤·¤Ê¤¬¤é¡¢
Áȹþ¤ß¥¨¥¤¥ê¥¢¥¹ \f(CW\*(C`ALL\*(C'\fR ¤È \f(CW\*(C`!\*(C'\fR ¤ò
ÁȤ߹ç¤ï¤»¤Æ¡¢¡ÖÆ󻰤Υ³¥Þ¥ó¥É°Ê³°¤Î¤¹¤Ù¤Æ¤Î¡×¥³¥Þ¥ó¥É¤Î¼Â¹Ô¤ò¤¢¤ë¥æ¡¼¥¶¤Ë
µö²Ä¤·¤è¤¦¤È¤·¤Æ¤â¡¢»×¤¤¤É¤ª¤ê¤ÎÆ°¤­¤Ë¤Ê¤ë¤³¤È¤Ï¤á¤Ã¤¿¤Ë¤Ê¤¤¤³¤È¤Ë
µ¤¤òÉÕ¤±¤Æ¤Û¤·¤¤ (²¼µ­¤Î¡Ö¥»¥­¥å¥ê¥Æ¥£¤Ë´Ø¤¹¤ëÃí°ÕÅÀ¡×¤ò»²¾È)¡£
.PP
Ť¤¹Ô¤Ï¡¢¹ÔËö¤Ë¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å ('\e') ¤òÃÖ¤±¤Ð¡¢·Ñ³¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
.PP
¥ê¥¹¥È¤Ë¤ª¤±¤ëÍ×ÁÇ´Ö¤ä¥æ¡¼¥¶ÀßÄê¤Ë¤ª¤±¤ë¹½Ê¸ÍÑÆüìʸ»ú 
('=', ':', '(', ')') ¤ÎÁ°¸å¤Ë¶õÇòʸ»ú (whitespace)¤òÆþ¤ì¤ë¤³¤È¤Ï¡¢
Ǥ°Õ¤Ç¤¢¤ë¡£
.PP
¼¡¤Îʸ»ú¤òñ¸ì (¥æ¡¼¥¶Ì¾¤È¤«¥Û¥¹¥È̾¤È¤«) ¤Î°ìÉô¤È¤·¤Æ»È¤¦¤È¤­¤Ï¡¢
¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å ('\e') ¤Ç¥¨¥¹¥±¡¼¥×¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
\&'@', '!', '=', ':', ',', '(', ')', '\e' ¤¬¤½¤ì¤Ç¤¢¤ë¡£
.SH "SUDOERS ¤Î¥ª¥×¥·¥ç¥ó"
.IX Header "SUDOERS OPTIONS"
¤¹¤Ç¤ËÀâÌÀ¤·¤¿¤è¤¦¤Ë¡¢\fBsudo\fR ¤ÎÆ°ºî¤Ï 
\&\f(CW\*(C`Default_Entry\*(C'\fR ¹Ô¤Ë¤è¤Ã¤ÆÊѹ¹¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
Defaults ¤ËÍ¿¤¨¤ë¤³¤È¤Î¤Ç¤­¤ë¥Ñ¥é¥á¡¼¥¿¤Ë¤Ä¤¤¤Æ¡¢¥µ¥Ý¡¼¥È¤µ¤ì¤Æ¤¤¤ë¤â
¤Î¤Î¤¹¤Ù¤Æ¤ò¡¢¥¿¥¤¥×Ê̤ˤޤȤá¤Æ°Ê²¼¤ËÎóµó¤¹¤ë¡£
.PP
\&\fB¥Õ¥é¥°\fR:
.IP "always_set_home" 16
.IX Item "always_set_home"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï´Ä¶­ÊÑ¿ô \f(CW\*(C`HOME\*(C'\fR ¤ò
ÊÑ¿ÈÂоݥ桼¥¶¤Î¥Û¡¼¥à¥Ç¥£¥ì¥¯¥È¥ê¤ËÀßÄꤹ¤ë (\fB\-u\fR ¥ª¥×¥·¥ç¥ó¤¬
»ÈÍѤµ¤ì¤Ê¤¤¤«¤®¤ê¡¢¤½¤ì¤Ï root ¤Ç¤¢¤ë)¡£»ö¼Â¾å¡¢°ÅÌۤΤ¦¤Á¤Ë \fBsudo\fR ¤Ë
\&\fB\-H\fR ¥ª¥×¥·¥ç¥ó¤¬¾ï¤Ë»ØÄꤵ¤ì¤ë¤³¤È¤Ë¤Ê¤ë¤ï¤±¤À¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "authenticate" 16
.IX Item "authenticate"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢¥æ¡¼¥¶¤Ï¥³¥Þ¥ó¥É¤Î¼Â¹Ô¤òµö²Ä¤µ¤ì¤ëÁ°¤Ë¡¢¥Ñ¥¹¥ï¡¼¥É¤Ç
(¤¢¤ë¤¤¤Ï¡¢¤Û¤«¤Îǧ¾ÚÊýË¡¤Ç) ǧ¾Ú¤ò¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£¤³¤Î¥Ç¥Õ¥©¥ë¥ÈÃͤÏ
\&\f(CW\*(C`PASSWD\*(C'\fR ¤ä \f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤ÇÊѹ¹¤Ç¤­¤ë¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIon\fR ¤Ç¤¢¤ë¡£
.IP "closefrom_override" 16
.IX Item "closefrom_override"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢¥æ¡¼¥¶¤¬ \fBsudo\fR ¤Î \fB\-C\fR ¥ª¥×¥·¥ç¥ó¤ò
»ÈÍѤǤ­¤ë¤è¤¦¤Ë¤Ê¤ë¡£\fB\-C\fR ¥ª¥×¥·¥ç¥ó¤È¤¤¤¦¤Î¤Ï¡¢\fBsudo\fR ¤¬
³«¤¤¤¿¥Õ¥¡¥¤¥ë¤òÊĤ¸¤Æ¤¤¤¯¤È¤­¡¢¤É¤Î¥Õ¥¡¥¤¥ë¡¦¥Ç¥£¥¹¥¯¥ê¥×¥¿¤«¤é
¥¯¥í¡¼¥º¤·¤Æ¤¤¤¯¤«¤È¤¤¤¦¥Ç¥Õ¥©¥ë¥È¤Î»ÏÅÀ¤òÊѹ¹¤¹¤ë¤â¤Î¤À¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "env_editor" 16
.IX Item "env_editor"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBvisudo\fR ¤Ï¥Ç¥Õ¥©¥ë¥È¤Î¥¨¥Ç¥£¥¿¡¦¥ê¥¹¥È¤ò
ÍøÍѤ¹¤ëÁ°¤Ë¡¢´Ä¶­ÊÑ¿ô \s-1EDITOR\s0 ¤ä \s-1VISUAL\s0 ¤ÎÃͤò
»ÈÍѤ¹¤ë¤è¤¦¤Ë¤Ê¤ë¡£¤³¤ì¤¬¥»¥­¥å¥ê¥Æ¥£¥Û¡¼¥ë¤Ë¤Ê¤ê¤«¤Í¤Ê¤¤¤³¤È¤Ë
Ãí°Õ¤·¤Æ¤Û¤·¤¤¡£¥æ¡¼¥¶¤¬ root ¤È¤·¤ÆǤ°Õ¤Î¥³¥Þ¥ó¥É¤ò¥í¥°¤Ëµ­Ï¿¤µ¤ì¤ë¤³¤È¤Ê¤¯
¼Â¹Ô¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¤«¤é¤À¡£¤³¤¦¤·¤¿´Ä¶­ÊÑ¿ô¤òÍøÍѤ¹¤ë¤È¤­¤Î¡¢
\&\fIenv_editor\fR ¤òÍ­¸ú¤Ë¤¹¤ë¤è¤ê¤â°ÂÁ´¤ÊÊýË¡¤Ï¡¢
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î \f(CW\*(C`editor\*(C'\fR ¥ª¥×¥·¥ç¥ó¤Ë
¥³¥í¥ó¤Ç¶èÀڤä¿¥¨¥Ç¥£¥¿¤Î¥ê¥¹¥È¤ò½ñ¤¤¤Æ¤ª¤¯¤³¤È¤À¡£¤½¤¦¤¹¤ì¤Ð¡¢
\&\fBvisudo\fR ¤¬ \s-1EDITOR\s0 ¤ä \s-1VISUAL\s0 ¤ò»È¤¦¤Î¤Ï¡¢
¤½¤ì¤¬ \f(CW\*(C`editor\*(C'\fR ¥ª¥×¥·¥ç¥ó¤Ë»ØÄꤷ¤¿ÃͤȥޥåÁ¤·¤¿¤È¤­¤À¤±¤Ë
¤Ê¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "env_reset" 16
.IX Item "env_reset"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï´Ä¶­¤ò°Ê²¼¤ÎÊÑ¿ô¤Î¤ß¤ò´Þ¤à¤è¤¦¤Ë
ÀßÄꤷľ¤¹¡£¤¹¤Ê¤ï¤Á¡¢\s-1LOGNAME\s0, \s-1SHELL\s0, \s-1USER\s0,
\&\s-1USERNAME\s0 ¤½¤ì¤Ë \f(CW\*(C`SUDO_*\*(C'\fR ¤Ç¤¢¤ë¡£¤½¤Î¸å¤Ç
¤µ¤é¤Ë¡¢\fBsudo\fR ¤òµ¯Æ°¤¹¤ë¥æ¡¼¥¶¤Î´Ä¶­¤Ë¤¢¤ëÊÑ¿ô¤Î¤¦¤Á¡¢
\&\f(CW\*(C`env_keep\*(C'\fR ¤ä \f(CW\*(C`env_check\*(C'\fR ¤Î¥ê¥¹¥È¤Ë
¥Þ¥Ã¥Á¤¹¤ë¤â¤Î¤¬Äɲ䵤ì¤ë¡£ \f(CW\*(C`env_keep\*(C'\fR ¤ä 
\&\f(CW\*(C`env_check\*(C'\fR ¤Î¥ê¥¹¥È¤Ë¥Ç¥Õ¥©¥ë¥È¤Ç¤É¤ó¤ÊÊÑ¿ô¤¬
´Þ¤Þ¤ì¤Æ¤¤¤ë¤«¤Ï¡¢root ¥æ¡¼¥¶¤¬ \fBsudo\fR ¤ò \fI\-V\fR ¥ª¥×¥·¥ç¥óÉÕ¤­¤Ç
¼Â¹Ô¤¹¤ì¤Ð¡¢¸«¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤Ê¤ª¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î
\&\fIsecure_path\fR ¥ª¥×¥·¥ç¥ó¤¬ÀßÄꤵ¤ì¤Æ¤¤¤ë¤È¤­¤Ï¡¢¤½¤ÎÃͤ¬
´Ä¶­ÊÑ¿ô \f(CW\*(C`PATH\*(C'\fR ¤È¤·¤Æ»ÈÍѤµ¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIon\fR ¤Ç¤¢¤ë¡£
.IP "fqdn" 16
.IX Item "fqdn"
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ç´°Á´½¤¾þ¥Û¥¹¥È̾¤ò»ÈÍѤ·¤¿¤«¤Ã¤¿¤é¡¢
¤³¤Î¥Õ¥é¥°¤ò¥»¥Ã¥È¤¹¤ë¤È¤è¤¤¡£¤¹¤Ê¤ï¤Á¡¢myhost ¤Ç¤Ï¤Ê¤¯¡¢
myhost.mydomain.edu ¤ò»È¤¤¤¿¤¤¾ì¹ç¤À¡£¤½¤Î¤È¤­¤Ç¤â¡¢¤½¤¦¤·¤¿¤±¤ì¤Ð¡¢
û½Ì·Á¤â»È¤¨¤ë (ξÊý¤òº®¤¼¤Æ»È¤¦¤³¤È¤À¤Ã¤Æ¤Ç¤­¤ë)¡£µ¤¤òÉÕ¤±¤Æ
¤Û¤·¤¤¤Î¤Ï¡¢\fIfqdn\fR ¤ò Í­¸ú¤Ë¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï \s-1DNS\s0 ¤Ø
Ì䤤¹ç¤ï¤»¤ò¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤Î¤Ç¡¢\s-1DNS\s0 ¥µ¡¼¥Ó¥¹¤¬
²ÔƯ¤·¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢\fBsudo\fR ¤¬»È¤¨¤Ê¤¯¤Ê¤ë¤«¤â¤·¤ì¤Ê¤¤¤È¤¤¤¦¤³¤È¤À
(¤¿¤È¤¨¤Ð¡¢¥Þ¥·¥ó¤¬¥Í¥Ã¥È¥ï¡¼¥¯¤ËÀܳ¤·¤Æ¤¤¤Ê¤¤¾ì¹ç)¡£
¤â¤¦°ì¤Äµ¤¤òÉÕ¤±¤ë¤Ù¤­¤³¤È¤¬¤¢¤ë¡£
\&\s-1DNS\s0 ¤¬ÃΤäƤ¤¤ë¥Û¥¹¥È¤ÎÀµ¼°Ì¾¤ò»È¤ï¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤È¤¤¤¦¤³¤È¤À¡£
¸À¤¤´¹¤¨¤ì¤Ð¡¢¥Û¥¹¥È¤Î¥¨¥¤¥ê¥¢¥¹ (\f(CW\*(C`CNAME\*(C'\fR ¤Î¥¨¥ó¥È¥ê) ¤ò
»È¤Ã¤Æ¤Ï¤¤¤±¤Ê¤¤¡£¥Ñ¥Õ¥©¡¼¥Þ¥ó¥¹¤ÎÌäÂê¤â¤¢¤ë¤·¡¢\s-1DNS\s0 ¤«¤é¥¨¥¤¥ê¥¢¥¹¤ò
¤¹¤Ù¤Æ¼èÆÀ¤¹¤ëÊýË¡¤Ï¤Ê¤¤¤«¤é¤Ç¤â¤¢¤ë¡£¥Þ¥·¥ó¤Î¥Û¥¹¥È̾¤¬ 
\&(\f(CW\*(C`hostname\*(C'\fR ¥³¥Þ¥ó¥É¤ÇÊ֤äƤ¯¤ë¤â¤Î¤¬) ¤¹¤Ç¤Ë
´°Á´½¤¾þ̾¤Ë¤Ê¤Ã¤Æ¤¤¤ë¤Ê¤é¤Ð¡¢\fIfqdn\fR ¤ò¥»¥Ã¥È¤¹¤ëɬÍפϤʤ¤¤À¤í¤¦¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "ignore_dot" 16
.IX Item "ignore_dot"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢´Ä¶­ÊÑ¿ô \f(CW\*(C`PATH\*(C'\fR Ãæ¤Ë '.' ¤ä ''
(¥«¥ì¥ó¥È¥Ç¥£¥ì¥¯¥È¥ê) ¤¬¤¢¤Ã¤Æ¤â¡¢\fBsudo\fR ¤Ï¤½¤ì¤ò̵»ë¤¹¤ë¡£
\&\f(CW\*(C`PATH\*(C'\fR ¤½¤Î¤â¤Î¤ÏÊѹ¹¤µ¤ì¤Ê¤¤¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "ignore_local_sudoers" 16
.IX Item "ignore_local_sudoers"
\&\s-1LDAP\s0 ¤ÎÊý¤Ç¤³¤Î¥Õ¥é¥°¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fI/etc/sudoers\fR ¤Î
²òÀϤ¬¥¹¥­¥Ã¥×¤µ¤ì¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¡¢¥í¡¼¥«¥ë¤Ë¤¢¤ë sudoers ¥Õ¥¡¥¤¥ë¤Î
»ÈÍѤò¶Ø¤¸¤Æ¡¢\s-1LDAP\s0 ¤Î¤ß¤ò»È¤¦¤è¤¦¤Ë¤·¤¿¤¤´ë¶È¤Î¤¿¤á¤Ë¤¢¤ë¡£
¤¿¤Á¤Î°­¤¤¥ª¥Ú¥ì¡¼¥¿¤¬ \fI/etc/sudoers\fR ¤Ë¼ê¤ò²Ã¤¨¤Æ¼«Ê¬¤Î¸¢¸Â¤ò
Áý¤ä¤½¤¦¤È¤·¤Æ¤â¡¢¤½¤¦¤·¤¿°­¤À¤¯¤ß¤ÏÁ˻ߤµ¤ì¤ë¤ï¤±¤À¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤¬
ÀßÄꤵ¤ì¤Æ¤¤¤ë¤È¤­¤Ï¡¢\fI/etc/sudoers\fR ¥Õ¥¡¥¤¥ë¤Ï¸ºß¤¹¤ëɬÍפ¹¤é¤Ê¤¤¡£
¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢¥Þ¥Ã¥Á¤¹¤ë \s-1LDAP\s0 ¤Î¶ñÂÎŪ¤Ê¥¨¥ó¥È¥ê¤¬
°ì¤Ä¤â¤Ê¤«¤Ã¤¿¤È¤­¤Ë¡¢¤É¤¦¿¶Éñ¤¦¤Ù¤­¤«¤ò \fBsudo\fR ¤Ë»Ø¼¨¤¹¤ë¤â¤Î¤À¤«¤é¡¢
¤³¤ì¤ò»ØÄꤷ¤¿ sudoOption ¤Ï \f(CW\*(C`cn=defaults\*(C'\fR ¤Î¥»¥¯¥·¥ç¥ó¤Ë
¤Ê¤±¤ì¤Ð°ÕÌ£¤¬¤Ê¤¤¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "insults" 16
.IX Item "insults"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢ÉÔÀµ¤Ê¥Ñ¥¹¥ï¡¼¥É¤¬ÆþÎϤµ¤ì¤¿¤È¤­¡¢
\&\fBsudo\fR ¤¬¥æ¡¼¥¶¤Ë°­ÂÖ¤ò¤Ä¤¯¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR
¤Ç¤¢¤ë¡£
.IP "log_host" 16
.IX Item "log_host"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢¥Û¥¹¥È̾¤¬ (syslog ·Ðͳ¤Ç¤Ï¤Ê¤¤) \fBsudo\fR ¤Î
¥í¥°¥Õ¥¡¥¤¥ë¤Ëµ­Ï¿¤µ¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR
¤Ç¤¢¤ë¡£
.IP "log_year" 16
.IX Item "log_year"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢»Í·å¤Îǯ¤¬ (syslog ·Ðͳ¤Ç¤Ï¤Ê¤¤) \fBsudo\fR ¤Î
¥í¥°¥Õ¥¡¥¤¥ë¤Ëµ­Æþ¤µ¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR 
¤Ç¤¢¤ë¡£
.IP "long_otp_prompt" 16
.IX Item "long_otp_prompt"
\&\fBS/Key\fR ¤ä \fB\s-1OPIE\s0\fR ¤Î¤è¤¦¤Ê One Time Password
(\s-1OTP\s0) ¥¹¥­¡¼¥à¤òºÎÍѤ·¤Æ¤¤¤ë¤È¤­¤Ë¤³¤ì¤òÍ­¸ú¤Ë¤¹¤ë¤È¡¢¥Á¥ã¥ì¥ó¥¸¤ò
¥í¡¼¥«¥ë¥¦¥£¥ó¥É¥¦¤Ë¥«¥Ã¥È¡¦¥¢¥ó¥É¡¦¥Ú¡¼¥¹¥È¤·¤ä¤¹¤¤¤è¤¦¤Ë¡¢
Æó¹Ô¤Î¥×¥í¥ó¥×¥È¤¬»ÈÍѤµ¤ì¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Î¥×¥í¥ó¥×¥È¤Û¤É¸«±É¤¨¤Ï¤è¤¯¤Ê¤¤¤¬¡¢
¤³¤Á¤é¤ÎÊý¤¬ÊØÍø¤À¤È»×¤¦¿Í¤â¤¤¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¤³¤Î¥Õ¥é¥°¤Ï \fIoff\fR 
¤Ç¤¢¤ë¡£
.IP "mail_always" 16
.IX Item "mail_always"
¥æ¡¼¥¶¤¬ \fBsudo\fR ¤ò¼Â¹Ô¤¹¤ë¤¿¤Ó¤Ë¡¢\fImailto\fR ¥æ¡¼¥¶¤Ë¥á¡¼¥ë¤òÁ÷¤ë¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "mail_badpass" 16
.IX Item "mail_badpass"
\&\fBsudo\fR ¤ò¼Â¹Ô¤¹¤ë¥æ¡¼¥¶¤¬Àµ¤·¤¤¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤¤¤È¡¢
\&\fImailto\fR ¥æ¡¼¥¶¤Ë¥á¡¼¥ë¤òÁ÷¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï 
\&\fIoff\fR ¤Ç¤¢¤ë¡£
.IP "mail_no_host" 16
.IX Item "mail_no_host"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤òµ¯Æ°¤·¤¿¥æ¡¼¥¶¤¬ \fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ë
¸ºß¤¹¤ë¤â¤Î¤Î¡¢»ÈÍÑÃæ¤Î¥Û¥¹¥È¤Ç¥³¥Þ¥ó¥É¤Î¼Â¹Ô¤òµö²Ä¤µ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢
\&\fImailto\fR ¥æ¡¼¥¶¤Ë¥á¡¼¥ë¤òÁ÷ÉÕ¤¹¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï 
\&\fIoff\fR ¤Ç¤¢¤ë¡£
.IP "mail_no_perms" 16
.IX Item "mail_no_perms"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤òµ¯Æ°¤·¤¿¥æ¡¼¥¶¤¬ \fBsudo\fR ¤Î»ÈÍѤò
µö²Ä¤µ¤ì¤Æ¤¤¤ë¤¬¡¢¼Â¹Ô¤·¤è¤¦¤È¤·¤Æ¤¤¤ë¥³¥Þ¥ó¥É¤¬ \fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î
¤½¤Î¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤ËÅÐÏ¿¤µ¤ì¤Æ¤¤¤Ê¤¤¤«¡¢ÌÀ¼¨Åª¤Ë¶Ø»ß¤µ¤ì¤Æ¤¤¤ë¾ì¹ç¡¢
\&\fImailto\fR ¥æ¡¼¥¶¤Ë¥á¡¼¥ë¤òÁ÷ÉÕ¤¹¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï 
\&\fIoff\fR ¤Ç¤¢¤ë¡£
.IP "mail_no_user" 16
.IX Item "mail_no_user"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤òµ¯Æ°¤·¤¿¥æ¡¼¥¶¤¬ \fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ë
µ­ºÜ¤µ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢\fImailto\fR ¥æ¡¼¥¶¤Ë¥á¡¼¥ë¤òÁ÷ÉÕ¤¹¤ë¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIon\fR ¤Ç¤¢¤ë¡£
.IP "noexec" 16
.IX Item "noexec"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤òÄ̤·¤Æ¼Â¹Ô¤µ¤ì¤ë¤¹¤Ù¤Æ¤Î¥³¥Þ¥ó¥É¤¬¡¢
\&\f(CW\*(C`EXEC\*(C'\fR ¥¿¥°¤Ç̵¸ú¤Ë¤µ¤ì¤Ê¤¤¤«¤®¤ê¡¢¤¢¤¿¤«¤â 
\&\f(CW\*(C`NOEXEC\*(C'\fR ¥¿¥°¤¬ÀßÄꤵ¤ì¤Æ¤¤¤ë¤«¤Î¤´¤È¤¯¿¶Éñ¤¦¤è¤¦¤Ë¤Ê¤ë¡£
¾å½Ò¤Î¡Ö\fI\s-1NOEXEC\s0 ¤È \s-1EXEC\s0\fR¡×¤ÎÀâÌÀ¡¢¤ª¤è¤Ó¡¢¤³¤Î¥Þ¥Ë¥å¥¢¥ë¤Î
½ª¤ï¤ê¤ÎÊý¤Ë¤¢¤ë¡Ö¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤òËɻߤ¹¤ë¡×¤È¤¤¤¦¥»¥¯¥·¥ç¥ó¤ò
»²¾È¤·¤Æ¤Û¤·¤¤¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "path_info" 16
.IX Item "path_info"
Ä̾ï \fBsudo\fR ¤Ï¡¢´Ä¶­ÊÑ¿ô \f(CW\*(C`PATH\*(C'\fR Ãæ¤Ë¥³¥Þ¥ó¥É¤¬
¸«ÉÕ¤«¤é¤Ê¤¤¤È¡¢¥æ¡¼¥¶¤Ë¤½¤Î¤³¤È¤òÃΤ餻¤ë¡£¤³¤ì¤òÍøÍѤ¹¤ì¤Ð¡¢
°ìÈ̥桼¥¶¤Ë¥¢¥¯¥»¥¹¸¢¤Î¤Ê¤¤¼Â¹Ô¥Õ¥¡¥¤¥ë¤Î¤¢¤ê¤«¤Ë¤Ä¤¤¤Æ¾ðÊó¤ò
¼ý½¸¤Ç¤­¤ë¤È¤¤¤¦Íýͳ¤«¤é¡¢¤³¤ÎÆ°ºî¤ò̵¸ú¤Ë¤·¤¿¤¤¥µ¥¤¥È¤â¤¢¤ë¤«¤â¤·¤ì¤Ê¤¤¡£
¤½¤Î¾ì¹ç¤Î·çÅÀ¤Ï¡¢¼Â¹Ô¥Õ¥¡¥¤¥ë¤¬Ã±¤Ë¥æ¡¼¥¶¤Î \f(CW\*(C`PATH\*(C'\fR Ãæ¤Ë
¤Ê¤«¤Ã¤¿¤À¤±¤Î¾ì¹ç¤Ç¤â¡¢¼Â¹Ô¤Îµö²Ä¤¬¤Ê¤¤¤È \fBsudo\fR ¤¬¥æ¡¼¥¶¤Ë¹ð¤²¤ë
¤³¤È¤Ë¤Ê¤Ã¤Æ¡¢¼Â¾ð¤¬¤ï¤«¤ê¤Ë¤¯¤¤¤«¤â¤·¤ì¤Ê¤¤¤³¤È¤Ç¤¢¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIon\fR ¤Ç¤¢¤ë¡£
.IP "passprompt_override" 16
.IX Item "passprompt_override"
Ä̾\fIpassprompt\fR ¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤Æ»ØÄꤵ¤ì¤¿¥Ñ¥¹¥ï¡¼¥É¥×¥í¥ó¥×¥È¤¬
»ÈÍѤµ¤ì¤ë¤Î¤Ï¡¢\s-1PAM\s0 ¤Î¤è¤¦¤Ê¥·¥¹¥Æ¥à¤¬ÍÑ°Õ¤·¤Æ¤¤¤ë
¥Ñ¥¹¥ï¡¼¥É¥×¥í¥ó¥×¥È¤¬ \*(L"Password:\*(R" ¤È¤¤¤¦Ê¸»úÎó¤Ë¥Þ¥Ã¥Á¤·¤Æ¤¤¤ë
¤È¤­¤À¤±¤Ç¤¢¤ë¡£\fIpassprompt_override\fR ¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢
\&\fIpassprompt\fR ¤¬Ìµ¾ò·ï¤Ç»È¤ï¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "preserve_groups" 16
.IX Item "preserve_groups"
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢\fBsudo\fR ¤Ï½ê°¥°¥ë¡¼¥×¤Î½é´üÃͤȤ·¤Æ¡¢ÊÑ¿ÈÂоݥ桼¥¶¤¬
½ê°¤·¤Æ¤¤¤ë¥°¥ë¡¼¥×¤Î¥ê¥¹¥È¤òÀßÄꤹ¤ë¡£ \fIpreserve_groups\fR ¤ò
¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤ò¼Â¹Ô¤¹¤ë¥æ¡¼¥¶¤Î½ê°¥°¥ë¡¼¥×¤Î¥ê¥¹¥È¤¬¡¢
Êѹ¹¤µ¤ì¤º¤Ë¤½¤Î¤Þ¤Þ°Ý»ý¤µ¤ì¤ë¡£¤È¤Ï¸À¤¨¡¢¼Â¥°¥ë¡¼¥× ID ¤ä
¼Â¸ú¥°¥ë¡¼¥× ID ¤¬ÊÑ¿ÈÂоݥ桼¥¶¤Î¤½¤ì¤ËÀßÄꤵ¤ì¤ë¤³¤È¤ËÊѤï¤ê¤Ï¤Ê¤¤¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "pwfeedback" 16
.IX Item "pwfeedback"
¤Û¤«¤Î¤¿¤¤¤Æ¤¤¤Î Unix ¥×¥í¥°¥é¥à¤ÈƱÍÍ¡¢\fBsudo\fR ¤Ï¥Ñ¥¹¥ï¡¼¥É¤ò
Æɤ߹þ¤à¤È¤­¡¢¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢¥æ¡¼¥¶¤¬ Return (¤Þ¤¿¤Ï Enter) ¥­¡¼¤ò
²¡¤¹¤Þ¤Ç¡¢¥¨¥³¡¼¤ò off ¤Ë¤¹¤ë¡£¤³¤ÎÆ°ºî¤Ë¤È¤Þ¤É¤¦¥æ¡¼¥¶¤¬Â¸ºß¤¹¤ë¡£
Èà¤é¤Ë¤Ï \fBsudo\fR ¤¬µÞ¤ËÈ¿±þ¤·¤Ê¤¯¤Ê¤Ã¤¿¤è¤¦¤Ë¸«¤¨¤ë¤Î¤À¡£
\&\fIpwfeedback\fR ¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢¥æ¡¼¥¶¤¬¥­¡¼¤ò²¡¤¹¤¿¤Ó¤Ë¡¢\fBsudo\fR ¤¬
Ìܤ˸«¤¨¤ëÈ¿±þ¤òÊÖ¤¹¤è¤¦¤Ë¤Ê¤ë¡£¤³¤ì¤Ë¤Ï¡¢¥»¥­¥å¥ê¥Æ¥£¾å¤ÎÌäÂ꤬
¤¢¤ë¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£²£¤Ç¸«¤Æ¤¤¤ë¿Í¤¬¡¢ÂǤÁ¹þ¤Þ¤ì¤¿¥Ñ¥¹¥ï¡¼¥É¤Î
ʸ»ú¿ô¤òÆÃÄꤹ¤ë¤³¤È¤¬¤Ç¤­¤ë¤«¤â¤·¤ì¤Ê¤¤¤Î¤À¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï
\&\fIoff\fR ¤Ç¤¢¤ë¡£
.IP "requiretty" 16
.IX Item "requiretty"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤¬¼Â¹Ô¤µ¤ì¤ë¤Î¤Ï¡¢¥æ¡¼¥¶¤¬¼ÂºÝ¤Î tty ¤Ë
¥í¥°¥¤¥ó¤·¤¿¤È¤­¤À¤±¤Ë¤Ê¤ë¡£¤¹¤Ê¤ï¤Á¡¢\fBsudo\fR ¤ò¼Â¹Ô¤Ç¤­¤ë¤Î¤Ï¡¢
¥í¥°¥¤¥ó¡¦¥»¥Ã¥·¥ç¥ó¤«¤é¤À¤±¤Ç¤¢¤Ã¤Æ¡¢
\&\fIcron\fR\|(8) ¤ä cgi-bin ¥¹¥¯¥ê¥×¥È¤È¤¤¤Ã¤¿¡¢¤Û¤«¤ÎÊýË¡¤ò²ð¤·¤Æ¼Â¹Ô¤¹¤ë
¤³¤È¤Ï¤Ç¤­¤Ê¤¤¤È¤¤¤¦¤³¤È¤À¡£¤³¤Î¥Õ¥é¥°¤Ï¡¢¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "root_sudo" 16
.IX Item "root_sudo"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢root ¤â \fBsudo\fR ¤ò¼Â¹Ô¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¡£
¤³¤Î¥Õ¥é¥°¤ò̵¸ú¤Ë¤¹¤ë¤È¡¢¥æ¡¼¥¶¤¬¤¿¤È¤¨¤Ð \f(CW"sudo sudo /bin/sh"\fR ¤È
¤¤¤Ã¤¿¤è¤¦¤Ë \fBsudo\fR ¥³¥Þ¥ó¥É¤ò\fBÏ¢º¿Åª¤Ë\fR»È¤Ã¤Æ¡¢¥ë¡¼¥È¥·¥§¥ë¤ò
³ÍÆÀ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Ê¤¯¤Ê¤ë¡£¤È¤³¤í¤Ç¡¢
\&\fIroot_sudo\fR ¤¬ off ¤À¤È¡¢root ¤¬ \fBsudoedit\fR ¤Þ¤Ç¼Â¹Ô¤Ç¤­¤Ê¤¯¤Ê¤ë
¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£
\&\fIroot_sudo\fR ¤ò̵¸ú¤Ë¤·¤Æ¤â¡¢¥»¥­¥å¥ê¥Æ¥£¤¬¼ÂºÝ¤Ë¸þ¾å¤¹¤ë¤ï¤±¤Ç¤Ï¤Ê¤¤¡£
¤³¤Î¥Õ¥é¥°¤¬Â¸ºß¤·¤Æ¤¤¤ë¤Î¤Ï¡¢¤â¤Ã¤Ñ¤éÎò»ËŪ¤ÊÍýͳ¤«¤é¤Ê¤Î¤À¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIon\fR ¤Ç¤¢¤ë¡£
.IP "rootpw" 16
.IX Item "rootpw"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï¥×¥í¥ó¥×¥È¤Ç¡¢µ¯Æ°¤·¤¿¥æ¡¼¥¶¤Î
¥Ñ¥¹¥ï¡¼¥É¤Ç¤Ï¤Ê¤¯¡¢root ¤Î¥Ñ¥¹¥ï¡¼¥É¤òÍ׵᤹¤ë¤è¤¦¤Ë¤Ê¤ë¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "runaspw" 16
.IX Item "runaspw"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï¥×¥í¥ó¥×¥È¤Ç¡¢µ¯Æ°¤·¤¿¥æ¡¼¥¶¤Î
¥Ñ¥¹¥ï¡¼¥É¤Ç¤Ï¤Ê¤¯¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î \fIrunas_default\fR ¥ª¥×¥·¥ç¥ó¤¬
ÄêµÁ¤·¤Æ¤¤¤ë¥æ¡¼¥¶¡¼¤Î (¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \f(CW\*(C`root\*(C'\fR ¤Ç¤¢¤ë)
¥Ñ¥¹¥ï¡¼¥É¤òÍ׵᤹¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "set_home" 16
.IX Item "set_home"
¤³¤ì¤¬¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤ë¤È¤­¡¢\fBsudo\fR ¤ò \fB\-s\fR ¥ª¥×¥·¥ç¥óÉÕ¤­¤Ç
µ¯Æ°¤¹¤ë¤È¡¢´Ä¶­ÊÑ¿ô \f(CW\*(C`HOME\*(C'\fR ¤¬ÊÑ¿ÈÂоݥ桼¥¶¤Î 
(\fB\-u\fR ¥ª¥×¥·¥ç¥ó¤¬»ÈÍѤµ¤ì¤Ê¤¤¤«¤®¤ê¡¢¤½¤ì¤Ï root ¤Ç¤¢¤ë)
¥Û¡¼¥à¥Ç¥£¥ì¥¯¥È¥ê¤ËÀßÄꤵ¤ì¤ë¡£¤¹¤Ê¤ï¤Á¡¢ \fB\-s\fR ¥ª¥×¥·¥ç¥ó¤¬
\&\fB\-H\fR ¥ª¥×¥·¥ç¥ó¤ò»ö¼Â¾å·ó¤Í¤ë¤³¤È¤Ë¤Ê¤ë¤ï¤±¤À¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "set_logname" 16
.IX Item "set_logname"
Ä̾ï \fBsudo\fR ¤Ï´Ä¶­ÊÑ¿ô \f(CW\*(C`LOGNAME\*(C'\fR,
\&\f(CW\*(C`USER\*(C'\fR, \f(CW\*(C`USERNAME\*(C'\fR ¤ò
ÊÑ¿ÈÂоݥ桼¥¶¤Î̾Á° (\fB-u\fR ¥ª¥×¥·¥ç¥ó¤¬»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢
ÉáÄÌ¤Ï root) ¤Ë¥»¥Ã¥È¤¹¤ë¡£¤·¤«¤·¡¢¥×¥í¥°¥é¥à¤Ë¤è¤Ã¤Æ¤Ï (¤¿¤È¤¨¤Ð¡¢
\&\s-1RCS\s0 ¥ê¥Ó¥¸¥ç¥ó¥³¥ó¥È¥í¡¼¥ë¥·¥¹¥Æ¥à¤¬¤½¤Î°ì¤Ä¤À¤¬) ¥æ¡¼¥¶¤¬
¼ÂºÝ¤Ë¤Ïï¤Ç¤¢¤ë¤«¤òȽÄꤹ¤ë¤Î¤Ë \f(CW\*(C`LOGNAME\*(C'\fR ¤ò
»ÈÍѤ·¤Æ¤¤¤ë¤³¤È¤¬¤¢¤ë¤Î¤Ç¡¢¤³¤Î¿¶Éñ¤¤¤òÊѹ¹¤¹¤ë¤³¤È¤¬Ë¾¤Þ¤·¤¤¾ì¹ç¤â¤¢¤ë¡£
set_logname ¥ª¥×¥·¥ç¥ó¤Ë '!' ¤òÉÕ¤±¤ÆÈÝÄꤹ¤ë¤³¤È¤Ç¡¢¤½¤ì¤¬¤Ç¤­¤ë¡£
¤Ê¤ª \fIenv_reset\fR ¥ª¥×¥·¥ç¥ó¤ò̵¸ú¤Ë¤·¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢
\&\fIenv_keep\fR ¥ê¥¹¥È¤Î¹àÌܤ¬ \fIset_logname\fR ¤Ë¤è¤ëÃͤò
¾å½ñ¤­¤¹¤ë¤³¤È¤Ë¤Ê¤ë¤Î¤Ç¡¢Ãí°Õ¤·¤Æ¤Û¤·¤¤¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï 
\&\fIon\fR ¤Ç¤¢¤ë¡£
.IP "setenv" 16
.IX Item "setenv"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢¥æ¡¼¥¶¤¬¥³¥Þ¥ó¥É¥é¥¤¥ó¤«¤é \fIenv_reset\fR ¥ª¥×¥·¥ç¥ó¤ò
̵¸ú¤Ë¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¡£¤µ¤é¤Ë¡¢¥³¥Þ¥ó¥É¥é¥¤¥ó¤«¤éÀßÄꤹ¤ë´Ä¶­ÊÑ¿ô¤¬ 
\&\fIenv_check\fR, \fIenv_delete\fR, \fIenv_keep\fR ¤Ë¤è¤ëÀ©¸Â¤ò
¼õ¤±¤Ê¤¯¤Ê¤ë¡£¤½¤ì¸Î¡¢¤½¤Î¤è¤¦¤Ê¤ä¤êÊý¤ÇÊÑ¿ô¤òÀßÄꤹ¤ë¤³¤È¤ò
µö²Ä¤¹¤ë¤Î¤Ï¡¢¿®ÍѤǤ­¤ë¥æ¡¼¥¶¤Î¤ß¤Ë¸Â¤ë¤Ù¤­¤À¡£¤³¤Î¥Õ¥é¥°¤Ï
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "shell_noargs" 16
.IX Item "shell_noargs"
¤³¤ì¤¬¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤ë¤È¤­¡¢\fBsudo\fR ¤ò°ú¤­¿ô¤Ê¤·¤Çµ¯Æ°¤¹¤ë¤È¡¢
\&\fBsudo\fR ¤Ï \fB\-s\fR ¥ª¥×¥·¥ç¥ó¤¬»ØÄꤵ¤ì¤¿¤«¤Î¤è¤¦¤Ë¿¶Éñ¤¦¡£
¤¹¤Ê¤ï¤Á¡¢root ¥æ¡¼¥¶¤È¤·¤Æ¥·¥§¥ë¤ò¼Â¹Ô¤¹¤ë¤ï¤±¤À (¥·¥§¥ë¤Ï¡¢
´Ä¶­ÊÑ¿ô \f(CW\*(C`SHELL\*(C'\fR ¤¬¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤ì¤Ð¡¢¤½¤ì¤Ë¤è¤Ã¤Æ·è¤Þ¤ë¤·¡¢
¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤Ê¤±¤ì¤Ð¡¢\fBsudo\fR ¤òµ¯Æ°¤·¤¿¥æ¡¼¥¶¤Î /etc/passwd ¥¨¥ó¥È¥ê¤Ë
ÅÐÏ¿¤µ¤ì¤¿¤â¤Î¤Ë¤Ê¤ë)¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "fast_glob" 16
.IX Item "fast_glob"
Ä̾ï \fBsudo\fR ¤Ï¥Ñ¥¹Ì¾¤Î¥Þ¥Ã¥Á¥ó¥°¤ò¤¹¤ë¤È¤­¡¢\fIglob\fR\|(3) ´Ø¿ô¤ò
»ÈÍѤ·¤Æ¡¢¥·¥§¥ë¡¦¥¹¥¿¥¤¥ë¤Î¥ï¥¤¥ë¥É¥«¡¼¥ÉŸ³« (glob) ¤ò¹Ô¤¦¡£¤·¤«¤·¡¢
\&\fIglob\fR\|(3) ¤Ï¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ë¥¢¥¯¥»¥¹¤¹¤ë¤Î¤Ç¡¢»ØÄê¥Ñ¥¿¡¼¥ó¤Ë
¤è¤Ã¤Æ¤Ï¡¢ºî¶È¤ò´°Î»¤¹¤ë¤Þ¤Ç¤Ë»þ´Ö¤¬¤«¤«¤ë¤³¤È¤¬¤¢¤ë¡£
ɬÍפʻþ¤Ë¥Þ¥¦¥ó¥È¤¹¤ë¤è¤¦¤Ë¤Ê¤Ã¤Æ¤¤¤ë (¤Ä¤Þ¤ê¥ª¡¼¥È¥Þ¥¦¥ó¥È¤Î)
¥Í¥Ã¥È¥ï¡¼¥¯¡¦¥Õ¥¡¥¤¥ë¡¦¥·¥¹¥Æ¥à¤ò»²¾È¤¹¤ë¤È¤­¤Ï¡¢¤È¤ê¤ï¤±»þ´Ö¤¬¤«¤«¤ë¡£
\&\fIfast_glob\fR ¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ë¤È¡¢\fBsudo\fR ¤¬
\&\fIfnmatch\fR\|(3) ´Ø¿ô¤ò»È¤¦¤è¤¦¤Ë¤Ê¤ë¤¬¡¢¤³¤Á¤é¤Î´Ø¿ô¤Ï¥Þ¥Ã¥Á¥ó¥°¤ÎºÝ¤Ë
¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ë¥¢¥¯¥»¥¹¤·¤Ê¤¤¡£\fIfast_glob\fR ¤Î·çÅÀ¤Ï¡¢
\&\fI./ls\fR ¤ä \fI../bin/ls\fR ¤Î¤è¤¦¤ÊÁêÂХѥ¹¤ËÂФ¹¤ë¥Þ¥Ã¥Á¤¬
¤Ç¤­¤Ê¤¤¤³¤È¤Ç¤¢¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "stay_setuid" 16
.IX Item "stay_setuid"
Ä̾ï \fBsudo\fR ¤¬¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤È¤­¡¢¼Â UID ¤È¼Â¸ú UID ¤Ï
ÊÑ¿ÈÂоݥ桼¥¶ (¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï root) ¤Î¤â¤Î¤Ë¥»¥Ã¥È¤µ¤ì¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï
¤½¤Î¿¶Éñ¤¤¤òÊѹ¹¤·¤Æ¡¢\fBsudo\fR ¤òµ¯Æ°¤·¤¿¥æ¡¼¥¶¤Î \s-1UID\s0 ¤¬¡¢
¤½¤Î¤Þ¤Þ¼Â \s-1UID\s0 ¤È¤·¤Æ»Ä¤ë¤è¤¦¤Ë¤¹¤ë¡£¸À¤¤´¹¤¨¤ë¤È¡¢\fBsudo\fR ¤¬ 
setuid ¥é¥Ã¥Ñ¡¼¤È¤·¤ÆÆ°ºî¤¹¤ë¤è¤¦¤Ë¤Ê¤ë¤ï¤±¤À¡£¥×¥í¥°¥é¥à¤ò setuid ¤Ç
Æ°¤«¤¹¤È¡¢´í¸±¤ò¤â¤¿¤é¤·¤«¤Í¤Ê¤¤¤È¤¤¤¦Íýͳ¤«¤é¡¢¤¢¤ë¼ï¤Îµ¡Ç½¤ò
»È¤¨¤Ê¤¤¤è¤¦¤Ë¤·¤Æ¤¤¤ë¥·¥¹¥Æ¥à¤Ç¤Ï¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤¬Ìò¤ËΩ¤Ä¤«¤â¤·¤ì¤Ê¤¤¡£
¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢ \fIsetreuid()\fR ´Ø¿ô¤Ê¤ê \fIsetresuid()\fR ´Ø¿ô¤Ê¤ê¤ò
»ý¤Ã¤Æ¤¤¤ë¥·¥¹¥Æ¥à¤Ç¤Î¤ßÍ­¸ú¤Ç¤¢¤ë¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "targetpw" 16
.IX Item "targetpw"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï¥×¥í¥ó¥×¥È¤Ç¡¢µ¯Æ°¤·¤¿¥æ¡¼¥¶¤Î¥Ñ¥¹¥ï¡¼¥É
¤Ç¤Ï¤Ê¤¯¡¢\fB\-u\fR ¥ª¥×¥·¥ç¥ó¤Ç»ØÄꤵ¤ì¤¿¥æ¡¼¥¶ (¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï root) ¤Î 
¥Ñ¥¹¥ï¡¼¥É¤òÍ׵᤹¤ë¡£¤³¤ÎÀßÄê¤ò¤¹¤ë¤È¡¢\fB\-u\fR ¥ª¥×¥·¥ç¥ó¤Î°ú¤­¿ô¤È¤·¤Æ¡¢
passwd ¥Ç¡¼¥¿¥Ù¡¼¥¹¤ËÅÐÏ¿¤µ¤ì¤Æ¤¤¤Ê¤¤ uid ¤¬»È¤¨¤Ê¤¯¤Ê¤ë¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.IP "tty_tickets" 16
.IX Item "tty_tickets"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢¥æ¡¼¥¶¤Ï tty ¤´¤È¤Ëǧ¾Ú¤ò¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¯¤Ê¤ë¡£
\&\fBsudo\fR ¤ÏÄ̾¥Á¥±¥Ã¥È¥Ç¥£¥ì¥¯¥È¥ê (ÌõÃí¡§¤¿¤È¤¨¤Ð 
/var/run/sudo) ¤Ë¤¢¤ë¡¢\fBsudo\fR ¤ò¼Â¹Ô¤·¤Æ¤¤¤ë¥æ¡¼¥¶¤ÈƱ¤¸Ì¾Á°¤Î¥Ç¥£
¥ì¥¯¥È¥ê¤òǧ¾Ú¤Ë»ÈÍѤ¹¤ë¡£¤·¤«¤·¡¢¤³¤Î¥Õ¥é¥°¤¬Í­¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢
¤½¤Î¥Ç¥£¥ì¥¯¥È¥ê¤Ë¤¢¤ë¡¢¥æ¡¼¥¶¤¬¥í¥°¥¤¥ó¤·¤Æ¤¤¤ë tty ¤ËÂбþ¤¹¤ë̾Á°¤Î
¥Õ¥¡¥¤¥ë¤ò»ÈÍѤ¹¤ë¤³¤È¤Ë¤Ê¤ë¤Î¤À¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR 
¤Ç¤¢¤ë¡£
.IP "umask_override" 16
.IX Item "umask_override"
¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï umask ¤ò \fIsudoers\fR ¤Î
umask ¥ª¥×¥·¥ç¥ó¤Ç»ØÄꤵ¤ì¤¿¤È¤ª¤ê¤ÎÃͤˡ¢Êѹ¹¤ò²Ã¤¨¤ë¤³¤È¤Ê¤¯ÀßÄꤹ¤ë¡£
¤³¤Î¤³¤È¤Ë¤è¤Ã¤Æ¡¢¥æ¡¼¥¶¼«¿È¤Î umask Ãͤè¤ê¤â¤Ã¤È´Ë¤ä¤«¤Ê umask Ãͤò
\&\fIsudoers\fR ¤Ç»ØÄꤹ¤ë¤³¤È¤¬²Äǽ¤Ë¤Ê¤ë¡£\fBsudo\fR ¤ÎÀΤÎÆ°ºî¤È
Ʊ¤¸¤Ë¤Ê¤ë¤ï¤±¤À¡£
\&\fIumask_override\fR ¤ò¥»¥Ã¥È¤·¤Ê¤¤¾ì¹ç¡¢¸½ºß¤Î \fBsudo\fR ¤Ï umask ¤ò¡¢
¥æ¡¼¥¶¤Î umask ÃÍ¤È \fIsudoers\fR ¤Ç»ØÄꤷ¤¿ umask ÃͤȤΥӥåÈϤË
ÀßÄꤹ¤ë¤³¤È¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.\" .IP "use_loginclass" 16
.\" .IX Item "use_loginclass"
.\" If set, \fBsudo\fR will apply the defaults specified for the target user's
.\" login class if one exists.  Only available if \fBsudo\fR is configured with
.\" the \-\-with\-logincap option.  This flag is \fIoff\fR by default.
.\" ¤³¤ì¤ò¥»¥Ã¥È¤¹¤ë¤È¡¢\fBsudo\fR ¤Ï¡¢ÊÑ¿ÈÂоݥ桼¥¶¤Î¥í¥°¥¤¥ó¥¯¥é¥¹¤¬Â¸
.\" ºß¤¹¤ë¤Ê¤é¤Ð¡¢¤½¤ì¤ËÂФ·¤Æ»ØÄꤵ¤ì¤¿¥Ç¥Õ¥©¥ë¥È¤ÎÃͤò»È¤¦¤³¤È¤Ë¤Ê¤ë¡£¤³
.\" ¤Î¥Õ¥é¥°¤Ï¡¢\fBsudo\fR ¤ò \-\-with\-logincap ¥ª¥×¥·¥ç¥ó¤òÉÕ¤±¤Æ 
.\" configure ¤·¤¿¤È¤­¤Î¤ßÍøÍѤ¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï 
.\" \&\fIoff\fR ¤Ç¤¢¤ë¡£
.IP "visiblepw" 16
.IX Item "visiblepw"
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢¥æ¡¼¥¶¤¬¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤È¤­¤Ë¡¢
»ÈÍѤ·¤Æ¤¤¤ë¥¿¡¼¥ß¥Ê¥ë¤Ç¥¨¥³¡¼¤ÎÍÞÀ©¤¬¤Ç¤­¤Ê¤«¤Ã¤¿¤é¡¢
\&\fBsudo\fR ¤Ï¼Â¹Ô¤òµñÈݤ¹¤ë¤è¤¦¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£¤³¤ì¤ËÂФ·¡¢
\&\fIvisiblepw\fR ¥Õ¥é¥°¤¬ÀßÄꤵ¤ì¤Æ¤¤¤ë¤È¡¢¥Ñ¥¹¥ï¡¼¥É¤¬¥¹¥¯¥ê¡¼¥ó¤Ë
ɽ¼¨¤µ¤ì¤Æ¤·¤Þ¤¦¾ì¹ç¤Ç¤â¡¢\fBsudo\fR ¤Ï¥×¥í¥ó¥×¥È¤ò½Ð¤·¤Æ¡¢¥Ñ¥¹¥ï¡¼¥É¤ò
µá¤á¤ë¡£¤³¤ÎÆ°ºî¤Ë¤è¤Ã¤Æ¡¢
\&\fIrsh\fR\|(1) ¤Ï tty ¤ò³ä¤êÅö¤Æ¤Ê¤¤¤Ë¤â¤«¤«¤ï¤é¤º¡¢
\&\f(CW"rsh somehost sudo ls"\fR ¤È¤¤¤Ã¤¿Áàºî¤Î¼Â¹Ô¤¬²Äǽ¤Ë¤Ê¤ë¤ï¤±¤À¡£
¤³¤Î¥Õ¥é¥°¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fIoff\fR ¤Ç¤¢¤ë¡£
.PP
\&\fBÀ°¿ô\fR:
.IP "closefrom" 16
.IX Item "closefrom"
\&\fBsudo\fR ¤Ï¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ëÁ°¤Ë¡¢É¸½àÆþÎÏ¡¢É¸½à½ÐÎÏ¡¢É¸½à¥¨¥é¡¼
(¤¹¤Ê¤ï¤Á¡¢¥Õ¥¡¥¤¥ë¥Ç¥£¥¹¥¯¥ê¥×¥¿ 0\-2 ¤Ç¤¢¤ë) ¤ò½ü¤¤¤Æ¡¢
¥ª¡¼¥×¥ó¤·¤¿¤¹¤Ù¤Æ¤Î¥Õ¥¡¥¤¥ë¡¦¥Ç¥£¥¹¥¯¥ê¥×¥¿¤ò¥¯¥í¡¼¥º¤¹¤ë¡£
\&\fIclosefrom\fR ¥ª¥×¥·¥ç¥ó¤ò»ÈÍѤ¹¤ë¤È¡¢0\-2 °Ê³°¤Î
¤É¤Î¥Õ¥¡¥¤¥ë¡¦¥Ç¥£¥¹¥¯¥ê¥×¥¿¤«¤é¥¯¥í¡¼¥º¤·¤Æ¹Ô¤¯¤«¤ò»ØÄꤹ¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
¥Ç¥Õ¥©¥ë¥È¤Ï \f(CW3\fR ¤Ç¤¢¤ë¡£
.IP "passwd_tries" 16
.IX Item "passwd_tries"
\&\fBsudo\fR ¤¬¡Ö¼ºÇԡפò¥í¥°¤Ëµ­Ï¿¤·¤Æ½ªÎ»¤¹¤ëÁ°¤Ë¡¢¥æ¡¼¥¶¤¬¥Ñ¥¹¥ï¡¼¥É¤ò
ÆþÎϤǤ­¤ë²ó¿ô¡£¥Ç¥Õ¥©¥ë¥È¤Ï \f(CW\*(C`3\*(C'\fR¡£
.PP
\&\fB¿¿µ¶ÃͤȤ·¤Æ¤â»ÈÍѤǤ­¤ëÀ°¿ô\fR:
.IP "loglinelen" 16
.IX Item "loglinelen"
\&\fBsudo\fR ÍÑ¥í¥°¥Õ¥¡¥¤¥ë¤Î°ì¹Ô¤¢¤¿¤ê¤Îʸ»ú¿ô¡£¤³¤ÎÃͤϡ¢¥í¥°¥Õ¥¡¥¤¥ë¤ò
¸«¤ä¤¹¤¯¤¹¤ë¤¿¤á¤Ë²þ¹Ô¤¹¤ë°ÌÃÖ¤ò·è¤á¤ë¤Î¤Ë»ÈÍѤµ¤ì¤ë¡£¤³¤ÎÃͤϡ¢
syslog ·Ðͳ¤Î¥í¥°¥Õ¥¡¥¤¥ë¤Ë¤Ï±Æ¶Á¤»¤º¡¢Ä¾ÀÜ¥Õ¥¡¥¤¥ë¤Ë¥í¥°¤ò½ñ¤­½Ð¤¹¤È¤­¤Î¤ß
¸ú²Ì¤¬¤¢¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ï \f(CW\*(C`80\*(C'\fR ¤Ç¤¢¤ë (²þ¹Ô¤ò¤·¤Ê¤¤¤è¤¦¤Ë
¤¹¤ë¤Ë¤Ï¡¢Ãͤò 0 ¤Ë¤¹¤ë¤«¡¢Æ¬¤Ë '!' ¤òÉÕ¤±¤Æ¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë)¡£
.IP "passwd_timeout" 16
.IX Item "passwd_timeout"
\&\fBsudo\fR ¤Î¥Ñ¥¹¥ï¡¼¥É¥×¥í¥ó¥×¥È¤¬»þ´ÖÀÚ¤ì¤Ë¤Ê¤ë¤Þ¤Ç¤Îʬñ°Ì¤Î»þ´Ö¡£
¥Ç¥Õ¥©¥ë¥È¤Ï \f(CW\*(C`5\*(C'\fR ¤Ç¤¢¤ë¡£¤³¤ì¤ò \f(CW0\fR ¤Ë¥»¥Ã¥È¤¹¤ë
¤È¡¢¥Ñ¥¹¥ï¡¼¥É¥×¥í¥ó¥×¥È¤¬»þ´ÖÀÚ¤ì¤Ê¤·¤Ë¤Ê¤ë¡£
.IP "timestamp_timeout" 16
.IX Item "timestamp_timeout"
\&\fBsudo\fR ¤¬¥Ñ¥¹¥ï¡¼¥É¤òºÆ¤ÓÍ׵᤹¤ë¤è¤¦¤Ë¤Ê¤ë¤Þ¤Ç¤Î»þ´Ö¤òʬñ°Ì¤Ç
»ØÄꤹ¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \f(CW\*(C`5\*(C'\fR ¤Ç¤¢¤ë¡£¤³¤ì¤ò \f(CW0\fR ¤Ë
¥»¥Ã¥È¤¹¤ë¤È¡¢Ëè²ó¥Ñ¥¹¥ï¡¼¥É¤òÍ׵᤹¤ë¤è¤¦¤Ë¤Ê¤ë¡£\f(CW0\fR ¤è¤ê¾®¤µ¤¤ÃͤË
¥»¥Ã¥È¤·¤¿¾ì¹ç¤Ï¡¢¥æ¡¼¥¶¤Î¥¿¥¤¥à¥¹¥¿¥ó¥×¤¬´ü¸ÂÀÚ¤ì¤Ë¤Ê¤ë¤³¤È¤¬¤Ê¤¤¡£
¥æ¡¼¥¶¤¬ \f(CW\*(C`sudo \-v\*(C'\fR ¤È \f(CW\*(C`sudo \-k\*(C'\fR ¤ò
¼Â¹Ô¤¹¤ë¤³¤È¤Ë¤è¤Ã¤Æ¡¢¥¿¥¤¥à¥¹¥¿¥ó¥×¤ò¼«Ê¬¤Çºî¤Ã¤¿¤ê¡¢¾Ã¤·¤¿¤ê¤Ç¤­¤ë¤è¤¦¤Ë
¤·¤¿¤«¤Ã¤¿¤é¡¢¤³¤Î¼ê¤ò»È¤¨¤Ð¤è¤¤¡£
.IP "umask" 16
.IX Item "umask"
¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤·¤Æ¤¤¤ë¤È¤­¤Ë»ÈÍѤ¹¤ë umask ÃÍ¡£¥æ¡¼¥¶¤Î umask Ãͤò¤½¤Î¤Þ¤Þ
»È¤¤¤¿¤«¤Ã¤¿¤é¡¢'!' ¤òƬ¤ËÉÕ¤±¤Æ¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë¤«¡¢0777 ¤Ë
¥»¥Ã¥È¤¹¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤ÎÃͤ¬ 0777 °Ê³°¤Î¾ì¹ç¡¢¼ÂºÝ¤Ë»ÈÍѤµ¤ì¤ë
umask Ãͤϡ¢¥æ¡¼¥¶¤Î umask ÃÍ¤È umask ¥ª¥×¥·¥ç¥ó¤Ç»ØÄꤹ¤ë umask ÃͤȤÎ
¥Ó¥Ã¥ÈϤˤʤ롣¤½¤Î¤³¤È¤Ë¤è¤Ã¤Æ¡¢\fBsudo\fR ¤¬¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤È¤­¤Î
umask Ãͤ¬¡¢¥æ¡¼¥¶¤Î umask Ãͤè¤êÄ㤯¤Ê¤é¤Ê¤¤¤è¤¦¤Ë¤Ê¤Ã¤Æ¤¤¤ë¤ï¤±¤À¡£
¤Ê¤ª¡¢umask ¥ª¥×¥·¥ç¥ó¤Î¥Ç¥Õ¥©¥ë¥È¤ÎÃͤϡ¢\f(CW\*(C`0022\*(C'\fR ¤Ç¤¢¤ë¡£
\&\s-1PAM\s0 ¤ò»ÈÍѤ·¤Æ¤¤¤ë¥·¥¹¥Æ¥à¤Ç¤Ï¡¢ \s-1PAM\s0 ¤Î¥Ç¥Õ¥©¥ë¥ÈÀßÄê¤Ç
umask Ãͤò»ØÄꤹ¤ë¤³¤È¤¬¤Ç¤­¤ë¤¬¡¢¤½¤Î¾ì¹ç¤Ï¡¢¤½¤ì¤¬ \fIsudoers\fR ¤Ç
»ØÄꤷ¤¿Ãͤò¾å½ñ¤­¤¹¤ë¤³¤È¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£
.PP
\&\fBʸ»úÎó\fR:
.IP "badpass_message" 16
.IX Item "badpass_message"
¥æ¡¼¥¶¤¬ÉÔÀµ¤Ê¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤¿¤È¤­¤Ëɽ¼¨¤¹¤ë¥á¥Ã¥»¡¼¥¸¡£
\&\fIinsults\fR ¥Õ¥é¥°¤¬Í­¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤Ê¤¤¤«¤®¤ê¡¢¥Ç¥Õ¥©¥ë¥È¤Ï
¡Ö\f(CW\*(C`Sorry, try again.\*(C'\fR¡×¤Ç¤¢¤ë¡£
.IP "editor" 16
.IX Item "editor"
\&\fBvisudo\fR ¤Ç»ÈÍѤǤ­¤ë¥¨¥Ç¥£¥¿¤ò¥³¥í¥ó (':') ¤Ç¶èÀڤ俥ꥹ¥È¡£
\&\fBvisudo\fR ¤Ï¡¢²Äǽ¤Ê¤é¤Ð¡¢¥æ¡¼¥¶¤Î \s-1EDITOR\s0 ´Ä¶­ÊÑ¿ô¤È°ìÃפ·
¤¿¥¨¥Ç¥£¥¿¤òÁªÂò¤¹¤ë¡£¤½¤ì¤¬¤Ç¤­¤Ê¤¤¤È¤­¤Ï¡¢¤³¤Î¥ê¥¹¥È¤Ë¤¢¤ë¥¨¥Ç¥£¥¿¤Ç¡¢
¼ÂºÝ¤Ë¸ºß¤·¡¢¤«¤Ä¼Â¹Ô²Äǽ¤ÊºÇ½é¤Î¥¨¥Ç¥£¥¿¤ò»ÈÍѤ¹¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ï»ÈÍÑ
¥·¥¹¥Æ¥à¤Ë¤ª¤±¤ë vi ¤Î¥Ñ¥¹¤Ç¤¢¤ë¡£
.IP "mailsub" 16
.IX Item "mailsub"
\&\fImailto\fR ¥æ¡¼¥¶¤ËÁ÷ÉÕ¤¹¤ë¥á¡¼¥ë¤Î·ï̾¡£¥¨¥¹¥±¡¼¥×ʸ»ú \f(CW%h\fR 
¤Ï¥Þ¥·¥ó¤Î¥Û¥¹¥È̾¤ËŸ³«¤µ¤ì¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ï¡Ö\f(CW\*(C`*** SECURITY
information for %h ***\*(C'\fR¡×¡£
.IP "noexec_file" 16
.IX Item "noexec_file"
¥é¥¤¥Ö¥é¥ê´Ø¿ô \fIexecv()\fR, \&\fIexecve()\fR, \fIfexecve()\fR ¤Î
¥À¥ß¡¼ÈÇ (¥¨¥é¡¼¤òÊÖ¤¹¤À¤±¤Î´Ø¿ô) ¤¬Æþ¤Ã¤Æ¤¤¤ë¶¦Í­¥é¥¤¥Ö¥é¥ê¤Î¥Ñ¥¹¡£
¤³¤ì¤Ï¡¢\f(CW\*(C`LD_PRELOAD\*(C'\fR ¤ä¤½¤ì¤ËÁêÅö¤¹¤ë¤â¤Î¤ò
¥µ¥Ý¡¼¥È¤·¤Æ¤¤¤ë¥·¥¹¥Æ¥à¤Ç \fInoexec\fR µ¡Ç½¤ò¼Â¸½¤¹¤ë¤¿¤á¤Ë»ÈÍѤµ¤ì¤ë¡£
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \fI/usr/local/libexec/sudo_noexec.so\fR ¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "passprompt" 16
.IX Item "passprompt"
¥Ñ¥¹¥ï¡¼¥É¤òÍ׵᤹¤ë¤È¤­¤Ë»ÈÍѤ¹¤ë¥Ç¥Õ¥©¥ë¥È¤Î¥×¥í¥ó¥×¥È¡£\fB-p\fR ¥ª
¥×¥·¥ç¥ó¤ä´Ä¶­ÊÑ¿ô \f(CW\*(C`SUDO_PROMPT\*(C'\fR ¤Ë¤è¤Ã¤ÆÊѹ¹¤¹¤ë¤³¤È
¤¬¤Ç¤­¤ë¡£°Ê²¼¤Î¥Ñ¡¼¥»¥ó¥È (`\f(CW\*(C`%\*(C'\fR') ¥¨¥¹¥±¡¼¥×¤¬»ÈÍѤÇ
¤­¤ë¡£
.RS 16
.ie n .IP "%H" 4
.el .IP "\f(CW%H\fR" 4
.IX Item "%H"
¥É¥á¥¤¥ó̾ÉÕ¤­¤Î¥í¡¼¥«¥ë¥Û¥¹¥È̾¤ËŸ³« (¥Þ¥·¥ó¤Î¥Û¥¹¥È̾¤¬´°Á´½¤¾þ̾¤«¡¢
\&\fIfqdn\fR ¥ª¥×¥·¥ç¥ó¤¬¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤ë¾ì¹ç¤ËÍ­¸ú)
.ie n .IP "%h" 4
.el .IP "\f(CW%h\fR" 4
.IX Item "%h"
¥É¥á¥¤¥ó̾¤Ê¤·¤Î¥í¡¼¥«¥ë¥Û¥¹¥È̾¤ËŸ³«
.ie n .IP "%p" 4
.el .IP "\f(CW%p\fR" 4
.IX Item "%p"
¥Ñ¥¹¥ï¡¼¥É¤òÍ׵ᤵ¤ì¤Æ¤¤¤ë¥æ¡¼¥¶Ì¾¤ËŸ³« (\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î 
\&\fIrootpw\fR, \fItargetpw\fR, \fIrunaspw\fR ¥Õ¥é¥°¤òº½Å¤¹¤ë)
.ie n .IP "%U" 4
.el .IP "\f(CW%U\fR" 4
.IX Item "%U"
ÊÑ¿ÈÂоݥ桼¥¶¤Î (¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï root) ¥í¥°¥¤¥ó̾¤ËŸ³«
.ie n .IP "%u" 4
.el .IP "\f(CW%u\fR" 4
.IX Item "%u"
\&\fBsudo\fR ¤òµ¯Æ°¤¹¤ë¥æ¡¼¥¶¤Î¥í¥°¥¤¥ó̾¤ËŸ³«
.ie n .IP "\*(C`%%\*(C'" 4
.el .IP "\f(CW\*(C`%%\*(C'\fR" 4
.IX Item "%%"
Ϣ³¤·¤¿Æó¸Ä¤Î \f(CW\*(C`%\*(C'\fR ¤Ï¡¢°ì¸Ä¤Î \f(CW\*(C`%\*(C'\fR ʸ»ú
¤½¤Î¤â¤Î¤ò°ÕÌ£¤¹¤ë
.RE
.RS 16
.Sp
¥Ç¥Õ¥©¥ë¥È¤ÎÃͤϡÖ\f(CW\*(C`Password:\*(C'\fR¡×¤Ç¤¢¤ë¡£
.RE
.\" .IP "role" 16
.\" .IX Item "role"
.\" The default SELinux role to use when constructing a new security
.\" context to run the command.  The default role may be overridden on
.\" a per-command basis in \fIsudoers\fR or via command line options.
.\" This option is only available whe \fBsudo\fR is built with SELinux support.
.\" ¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤¿¤á¤Ë SELinux ¤Î¿·¤·¤¤¥»¥­¥å¥ê¥Æ¥£¡¦¥³¥ó¥Æ¥­¥¹¥È¤ò
.\" ¹½À®¤¹¤ë¤È¤­¡¢»ÈÍѤ¹¤ë¥Ç¥Õ¥©¥ë¥È¤Î¥í¡¼¥ë¡£¥Ç¥Õ¥©¥ë¥È¤Î¥í¡¼¥ë¤Ï¡¢
.\" \&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ä¡¢¥³¥Þ¥ó¥É¥é¥¤¥ó¥ª¥×¥·¥ç¥ó¤ò»È¤Ã¤Æ¡¢¥³¥Þ¥ó¥É
.\" ¤´¤È¤ËÊѹ¹¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤¬ÍøÍѤǤ­¤ë¤Î¤Ï¡¢\fBsudo\fR 
.\" ¤¬ SELinux ¥µ¥Ý¡¼¥È¤Ä¤­¤ÇºîÀ®¤µ¤ì¤¿¤È¤­¤À¤±¤Ç¤¢¤ë¡£
.IP "runas_default" 16
.IX Item "runas_default"
¥³¥Þ¥ó¥É¥é¥¤¥ó¤Ç \fB-u\fR ¥ª¥×¥·¥ç¥ó¤¬»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¤È¤­¤Î¡¢¥Ç¥Õ¥©¥ë¥È¤Î
ÊÑ¿ÈÂоݥ桼¥¶¡£¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \f(CW\*(C`root\*(C'\fR ¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£
\fIrunas_default\fR ¤ò¥»¥Ã¥È¤¹¤ë¤Ê¤é¡¢\f(CW\*(C`Runas_Alias\*(C'\fR ¤ò
»ØÄꤹ¤ë¤è¤ê¤âÁ°¤Ë¤ä¤é¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤³¤È¤ËÃí°Õ¤¹¤ë¤³¤È¡£
.IP "syslog_badpri" 16
.IX Item "syslog_badpri"
¥æ¡¼¥¶¤¬Ç§¾Ú¤Ë¼ºÇÔ¤·¤¿¤È¤­¤Ë»ÈÍѤ¹¤ë syslog ¤ÎÍ¥Àè½ç°Ì (priority)¡£¥Ç
¥Õ¥©¥ë¥È¤Ç¤Ï \f(CW\*(C`alert\*(C'\fR ¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "syslog_goodpri" 16
.IX Item "syslog_goodpri"
¥æ¡¼¥¶¤¬Ç§¾Ú¤ËÀ®¸ù¤·¤¿¤È¤­¤Ë»ÈÍѤ¹¤ë syslog ¤ÎÍ¥Àè½ç°Ì (priority)¡£¥Ç
¥Õ¥©¥ë¥È¤Ç¤Ï \f(CW\*(C`notice\*(C'\fR ¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "sudoers_locale" 16
.IX Item "sudoers_locale"
sudoers ¥Õ¥¡¥¤¥ë¤ò²òÀϤ¹¤ë¤È¤­¤Ë»ÈÍѤ¹¤ë¥í¥±¡¼¥ë¡£¥í¥±¡¼¥ë¤ÎÊѹ¹¤Ï¡¢
sudoers ¤Î²ò¼á¤Ë±Æ¶Á¤¬¤¢¤ë¤«¤â¤·¤ì¤Ê¤¤¤Î¤Ç¡¢Ãí°Õ¤·¤Æ¤Û¤·¤¤¡£
¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï \f(CW"C"\fR ¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "timestampdir" 16
.IX Item "timestampdir"
\&\fBsudo\fR ¤¬¥¿¥¤¥à¥¹¥¿¥ó¥×¡¦¥Õ¥¡¥¤¥ë¤òÃÖ¤¯¥Ç¥£¥ì¥¯¥È¥ê¡£¥Ç¥Õ¥©¥ë¥È
¤Ï \fI/var/run/sudo\fR ¤Ç¤¢¤ë¡£
.IP "timestampowner" 16
.IX Item "timestampowner"
¥¿¥¤¥à¥¹¥¿¥ó¥×¡¦¥Ç¥£¥ì¥¯¥È¥ê¤È¤½¤³¤ËÃÖ¤«¤ì¤ë¥¿¥¤¥à¥¹¥¿¥ó¥×¤Î½êÍ­¼Ô¡£¥Ç
¥Õ¥©¥ë¥È¤Ï \f(CW\*(C`root\*(C'\fR ¤Ç¤¢¤ë¡£
.\" .IP "type" 16
.\" .IX Item "type"
.\" The default SELinux type to use when constructing a new security
.\" context to run the command.  The default type may be overridden on
.\" a per-command basis in \fIsudoers\fR or via command line options.
.\" This option is only available whe \fBsudo\fR is built with SELinux support.
.\" ¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤¿¤á¤Ë SELinux ¤Î¿·¤·¤¤¥»¥­¥å¥ê¥Æ¥£¡¦¥³¥ó¥Æ¥­¥¹¥È¤ò
.\" ¹½À®¤¹¤ë¤È¤­¡¢»ÈÍѤ¹¤ë¥Ç¥Õ¥©¥ë¥È¤Î¥¿¥¤¥×¡£¥Ç¥Õ¥©¥ë¥È¤Î¥¿¥¤¥×¤Ï¡¢
.\" \&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ä¡¢¥³¥Þ¥ó¥É¥é¥¤¥ó¥ª¥×¥·¥ç¥ó¤ò»È¤Ã¤Æ¡¢¥³¥Þ¥ó¥É
.\" ¤´¤È¤ËÊѹ¹¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤¬ÍøÍѤǤ­¤ë¤Î¤Ï¡¢\fBsudo\fR 
.\" ¤¬ SELinux ¥µ¥Ý¡¼¥È¤Ä¤­¤ÇºîÀ®¤µ¤ì¤¿¤È¤­¤À¤±¤Ç¤¢¤ë¡£
.PP
\&\fB¿¿µ¶ÃͤȤ·¤Æ¤â»ÈÍѤǤ­¤ëʸ»úÎó\fR:
.IP "askpass" 12
.IX Item "askpass"
\&\fIaskpass\fR ¤Ç»ØÄꤹ¤ë¤Î¤Ï¡¢¥Ø¥ë¥Ñ¡¼¡¦¥×¥í¥°¥é¥à¤ÎÀäÂХѥ¹¤Ç¤¢¤ë¡£
¤³¤Î¥Ø¥ë¥Ñ¡¼¡¦¥×¥í¥°¥é¥à¤Ï¡¢¥¿¡¼¥ß¥Ê¥ë¤òÍøÍѤǤ­¤Ê¤¤¤È¤­¤Ë¡¢
¥æ¡¼¥¶¤Î¥Ñ¥¹¥ï¡¼¥É¤òÆɤ߹þ¤à¤¿¤á¤Ë»ÈÍѤ¹¤ë¡£¤¿¤È¤¨¤Ð¡¢\fBsudo\fR ¤¬
(¥Æ¥­¥¹¥È¥Ù¡¼¥¹¤Ç¤Ï¤Ê¤¯) ¥°¥é¥Õ¥£¥«¥ë¤Ê¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤«¤é¼Â¹Ô¤µ¤ì¤ë
¤È¤¤¤Ã¤¿¾ì¹ç¤À¡£\fIaskpass\fR ¤Ç»ØÄꤵ¤ì¤¿¥Ø¥ë¥Ñ¡¼¡¦¥×¥í¥°¥é¥à¤Ï¡¢
ÅϤµ¤ì¤¿°ú¤­¿ô¤ò¥×¥í¥ó¥×¥È¤È¤·¤Æɽ¼¨¤·¡¢¥æ¡¼¥¶¤Î¥Ñ¥¹¥ï¡¼¥É¤òɸ½à½ÐÎϤË
½ñ¤­½Ð¤¹¤Ù¤­¤Ç¤¢¤ë¡£
\&\fIaskpass\fR ¤ÎÃͤϡ¢´Ä¶­ÊÑ¿ô \f(CW\*(C`SUDO_ASKPASS\*(C'\fR ¤Ç
¾å½ñ¤­¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
.IP "env_file" 12
.IX Item "env_file"
\&\fIenv_file\fR ¥ª¥×¥·¥ç¥ó¤Ç¥Õ¥¡¥¤¥ë¤ÎÀäÂХѥ¹¤ò»ØÄꤹ¤ë¤È¡¢
¼Â¹Ô¤¹¤ë¥×¥í¥°¥é¥à¤Î´Ä¶­¤È¤·¤ÆÀßÄꤹ¤ëÊÑ¿ô¤ò¤½¤Î¥Õ¥¡¥¤¥ë¤Ë³ÊǼ¤·¤Æ
¤ª¤¯¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤Î¥Õ¥¡¥¤¥ë¤Î¥¨¥ó¥È¥ê¤Ï \f(CW\*(C`VARIABLE=value\*(C'\fR
¤« \f(CW\*(C`export VARIABLE=value\*(C'\fR ¤Î·Á¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
ÊÑ¿ô¤ÎÃͤò¥·¥ó¥°¥ë¥¯¥©¡¼¥È¤ä¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç°Ï¤ó¤Ç¤â¤è¤¤¡£
¤³¤Î¥Õ¥¡¥¤¥ë¤Ë´Þ¤Þ¤ì¤ëÊÑ¿ô¤Ï¡¢\fIenv_keep\fR ¤ä \fIenv_check\fR ¤Î¤è¤¦¤Ê
\&\fBsudo\fR ¤Î¤Û¤«¤Î´Ä¶­ÀßÄê¤Î±Æ¶Á¤ò¼õ¤±¤ë¡£
.IP "exempt_group" 12
.IX Item "exempt_group"
¤³¤Î¥°¥ë¡¼¥×¤Î¥æ¡¼¥¶¤Ï¥Ñ¥¹¥ï¡¼¥É¤ÎÆþÎϤä \fIsecure_path\fR ¤Ë¤è¤ë
\&\s-1PATH\s0 ¤Î¸ÂÄê¤òÌȽü¤µ¤ì¤Æ¤¤¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï
¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤Ê¤¤¡£
.IP "lecture" 12
.IX Item "lecture"
\&\fBsudo\fR ¤Ï¥Ñ¥¹¥ï¡¼¥É¥×¥í¥ó¥×¥È¤Ëź¤¨¤Æ´Êñ¤Ê·±²ü¤òɽ¼¨¤¹¤ë¤³¤È¤¬
¤Ç¤­¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¤½¤Î·±²ü¤ò¤¤¤Äɽ¼¨¤¹¤ë¤«¤ò·èÄꤹ¤ë¡£°Ê²¼¤ÎÃͤ¬
²Äǽ¤Ç¤¢¤ë¡£
.RS 12
.IP "always" 8
.IX Item "always"
¤¤¤Ä¤Ç¤âɬ¤º·±²ü¤òɽ¼¨¤¹¤ë
.IP "never" 8
.IX Item "never"
·±²ü¤ò°ìÀÚɽ¼¨¤·¤Ê¤¤¡£
.IP "once" 8
.IX Item "once"
¥æ¡¼¥¶¤¬¤Ï¤¸¤á¤Æ \fBsudo\fR ¤ò¼Â¹Ô¤·¤¿¤È¤­¤À¤±É½¼¨¤¹¤ë¡£
.RE
.RS 12
.Sp
Ãͤò»ØÄꤷ¤Ê¤¤¤È¡¢\fIonce\fR ¤ò»ØÄꤷ¤¿¤³¤È¤Ë¤Ê¤ë¡£Æ¬¤Ë '!' ¤òÉÕ¤±¤Æ¡¢
¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë¤È¡¢ÃÍ¤Ë \fInever\fR ¤¬»ÈÍѤµ¤ì¤ë¡£
¥Ç¥Õ¥©¥ë¥È¤ÎÃÍ¤Ï \fIonce\fR ¤Ç¤¢¤ë¡£
.RE
.IP "lecture_file" 12
.IX Item "lecture_file"
ɸ½à¤Î·±²ü¤ÎÂå¤ï¤ê¤Ë»ÈÍѤ¹¤ë \fBsudo\fR ¤Î·±²ü¤ò½ñ¤­¹þ¤ó¤À¥Õ¥¡¥¤¥ë¤¬¤¢¤ë¤Ê¤é¡¢
\&\fIlecture_file\fR ¤Ç¤½¤Î¥Ñ¥¹¤ò»ØÄꤹ¤ë¡£\fBsudo\fR ¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢
¥×¥í¥°¥é¥à¤ËËä¤á¹þ¤Þ¤ì¤¿·±²ü¤ò»ÈÍѤ¹¤ë¡£
.IP "listpw" 12
.IX Item "listpw"
¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢\fBsudo\fB ¤ò\fB\ -l\fR ¥ª¥×¥·¥ç¥óÉÕ¤­¤Ç¼Â¹Ô¤·¤¿¤È¤­¡¢
¥æ¡¼¥¶¤¬¥Ñ¥¹¥ï¡¼¥É¤òÍ׵ᤵ¤ì¤ë¤Î¤Ï¡¢¤É¤ó¤Ê¾ì¹ç¤«¤ò·èÄꤹ¤ë¡£
°Ê²¼¤Î¤è¤¦¤ÊÃͤ¬²Äǽ¤Ç¤¢¤ë¡£
.RS 12
.IP "all" 8
.IX Item "all"
¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤¤¤Ç¤¹¤à¤¿¤á¤Ë¤Ï¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î»ÈÍÑÃæ¤Î
¥Û¥¹¥È¤ËÂФ¹¤ëÅö³º¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤Î¤¹¤Ù¤Æ¤Ë 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬ÀßÄꤵ¤ì¤Æ¤¤¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
.IP "always" 8
.IX Item "always"
¥æ¡¼¥¶¤Ï \fB\-l\fR ¥ª¥×¥·¥ç¥ó¤ò»ÈÍѤ¹¤ëºÝ¤Ëɬ¤º¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤±¤ì¤Ð
¤Ê¤é¤Ê¤¤¡£
.IP "any" 8
.IX Item "any"
¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤¤¤Ç¤¹¤à¤¿¤á¤Ë¤Ï¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î»ÈÍÑÃæ¤Î
¥Û¥¹¥È¤ËÂФ¹¤ëÅö³º¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤Î¾¯¤Ê¤¯¤È¤â°ì¤Ä¤Ë 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬ÀßÄꤵ¤ì¤Æ¤¤¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
.IP "never" 8
.IX Item "never"
¥æ¡¼¥¶¤Ï \fB\-l\fR ¥ª¥×¥·¥ç¥ó¤ò»ÈÍѤ¹¤ëºÝ¤Ë¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ¹¤ëɬÍפ¬
¤Þ¤Ã¤¿¤¯¤Ê¤¤¡£
.RE
.RS 12
.Sp
Ãͤò»ØÄꤷ¤Ê¤¤¤È¡¢ÃÍ¤Ï \fIany\fR ¤À¤È¸«¤Ê¤µ¤ì¤ë¡£'!' ¤òƬ¤ËÉÕ¤±¤Æ¡¢
¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë¤È¡¢ÃÍ¤Ë \fInever\fR ¤¬»È¤ï¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£
¥Ç¥Õ¥©¥ë¥È¤Ï \fIany\fR ¤Ç¤¢¤ë¡£
.RE
.IP "logfile" 12
.IX Item "logfile"
\&\fBsudo\fR ¤Î¥í¥°¥Õ¥¡¥¤¥ë¤Î¥Ñ¥¹ (syslog ·Ðͳ¤Î¥í¥°¥Õ¥¡¥¤¥ë¤Ç¤Ï¤Ê¤¤)¡£
¥Ñ¥¹¤ò»ØÄꤹ¤ë¤È¡¢¥Õ¥¡¥¤¥ë¤Ø¤Î¥í¥®¥ó¥°¤¬ on ¤Ë¤Ê¤ê¡¢ '!' ¤òƬ¤ËÉÕ¤±¤Æ¡¢
¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë¤È¡¢off ¤Ë¤Ê¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢\fBsudo\fR ¤Ï 
syslog ·Ðͳ¤Ç¥í¥°¤ò¼è¤ë¡£
.IP "mailerflags" 12
.IX Item "mailerflags"
¥á¡¼¥é¤òµ¯Æ°¤¹¤ë¤È¤­¤Ë»ÈÍѤ¹¤ë¥Õ¥é¥°¡£¥Ç¥Õ¥©¥ë¥È¤Ï \fB\-t\fR ¤Ë
¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "mailerpath" 12
.IX Item "mailerpath"
·Ù¹ð¥á¡¼¥ë¤ÎÁ÷¿®¤Ë»È¤¦¥á¡¼¥ë¡¦¥×¥í¥°¥é¥à¤Î¥Ñ¥¹¡£¥Ç¥Õ¥©¥ë¥È¤Ï configure 
¤·¤¿¤È¤­¤Ë¸«¤Ä¤«¤Ã¤¿ sendmail ¤Î¥Ñ¥¹¡£
.IP "mailfrom" 12
.IX Item "mailfrom"
·Ù¹ð¥á¡¼¥ë¤ä¥¨¥é¡¼¡¦¥á¡¼¥ë¤òÁ÷¤ë¤È¤­¡¢º¹½Ð¿Í¤È¤·¤Æ»ÈÍѤ¹¤ë¥¢¥É¥ì¥¹¡£
\&\fBsudo\fR ¤¬ \f(CW\*(C`@\*(C'\fR µ­¹æ¤ò²ò¼á¤·¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤¿¤á¡¢
¥¢¥É¥ì¥¹¤Ï¥À¥Ö¥ë¥¯¥©¡¼¥È (\f(CW\*(C`"\*(C'\fR) ¤Ç°Ï¤à¤Ù¤­¤Ç¤¢¤ë¡£
¥Ç¥Õ¥©¥ë¥È¤Ï¡¢\fBsudo\fR ¤ò¼Â¹Ô¤¹¤ë¥æ¡¼¥¶¤Î̾Á°¡£
.IP "mailto" 12
.IX Item "mailto"
·Ù¹ð¥á¡¼¥ë¤ä¥¨¥é¡¼¡¦¥á¡¼¥ë¤òÁ÷ÉÕ¤¹¤ë°¸Àè¤Î¥¢¥É¥ì¥¹¡£\fBsudo\fR ¤¬ 
\&\f(CW\*(C`@\*(C'\fR µ­¹æ¤ò²ò¼á¤·¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤¿¤á¡¢¥¢¥É¥ì¥¹¤Ï
¥À¥Ö¥ë¥¯¥©¡¼¥È (\f(CW\*(C`"\*(C'\fR) ¤Ç°Ï¤à¤Ù¤­¤Ç¤¢¤ë¡£¥Ç¥Õ¥©¥ë¥È¤Ï root ¤Ë
¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "secure_path" 12
.IX Item "secure_path"
\&\fBsudo\fR ¤«¤é¼Â¹Ô¤µ¤ì¤ë¤¢¤é¤æ¤ë¥³¥Þ¥ó¥É¤¬»ÈÍѤ¹¤ë¥Ñ¥¹¡£
\&\fBsudo\fR ¤ò¼Â¹Ô¤¹¤ë¥æ¡¼¥¶¤¬¡¢ÌµÆñ¤Ê´Ä¶­ÊÑ¿ô \f(CW\*(C`PATH\*(C'\fR ¤ò
»È¤Ã¤Æ¤¤¤ë¤«¤É¤¦¤«³Î¿®¤¬»ý¤Æ¤Ê¤¤¤Ê¤é¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»ÈÍѤ¹¤ë¤È¤è¤¤¤À¤í¤¦¡£
¤â¤¦°ì¤Ä¤Î»ÈÍÑË¡¤Ï¡¢¡Öroot ¤Î¥Ñ¥¹¡×¤È¡Ö°ìÈ̥桼¥¶¤Î¥Ñ¥¹¡×¤òÊ̤Τâ¤Î¤Ë
¤·¤Æ¤ª¤­¤¿¤¤¾ì¹ç¤À¡£¥æ¡¼¥¶¤¬ \fIexempt_group\fR ¥ª¥×¥·¥ç¥ó¤Ç»ØÄꤷ¤¿
¥°¥ë¡¼¥×¤Ë°¤·¤Æ¤¤¤ë¤È¡¢¤½¤Î¥æ¡¼¥¶¤Ï \fIsecure_path\fR ¤Î±Æ¶Á¤ò¼õ¤±¤Ê¤¤¡£
¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¥»¥Ã¥È¤µ¤ì¤Æ¤¤¤Ê¤¤¡£
.IP "syslog" 12
.IX Item "syslog"
syslog ¤ò»È¤Ã¤Æ¥í¥°¤ò¼è¤Ã¤Æ¤¤¤ë¾ì¹ç¤Î syslog ¤Î¥Õ¥¡¥·¥ê¥Æ¥£ (syslog ·Ðͳ¤Ç
¥í¥°¤ò¼è¤é¤Ê¤¤¾ì¹ç¤Ï¡¢'!' ¤òƬ¤ËÉÕ¤±¤Æ¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë)¡£
¥Ç¥Õ¥©¥ë¥È¤Ï \f(CW\*(C`local2\*(C'\fR ¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£
.IP "verifypw" 12
.IX Item "verifypw"
¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢\fBsudo\fR ¤ò \fB\-v\fR ¥ª¥×¥·¥ç¥óÉÕ¤­¤Ç¼Â¹Ô¤·¤¿¤È¤­¡¢
¥æ¡¼¥¶¤¬¥Ñ¥¹¥ï¡¼¥É¤òÍ׵ᤵ¤ì¤ë¤Î¤Ï¡¢¤É¤ó¤Ê¾ì¹ç¤«¤ò·èÄꤹ¤ë¡£¼¡¤Î¤è¤¦¤Ê
Ãͤ¬²Äǽ¤Ç¤¢¤ë¡£
.RS 12
.IP "all" 8
.IX Item "all"
¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤¤¤Ç¤¹¤à¤¿¤á¤Ë¤Ï¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î»ÈÍÑÃæ¤Î
¥Û¥¹¥È¤ËÂФ¹¤ëÅö³º¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤Î¤¹¤Ù¤Æ¤Ë 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬ÀßÄꤵ¤ì¤Æ¤¤¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
.IP "always" 8
.IX Item "always"
¥æ¡¼¥¶¤Ï \fB\-v\fR ¥ª¥×¥·¥ç¥ó¤ò»ÈÍѤ¹¤ëºÝ¤Ëɬ¤º¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤±¤ì¤Ð
¤Ê¤é¤Ê¤¤¡£
.IP "any" 8
.IX Item "any"
¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤¤¤Ç¤¹¤à¤¿¤á¤Ë¤Ï¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Î»ÈÍÑÃæ¤Î
¥Û¥¹¥È¤ËÂФ¹¤ëÅö³º¥æ¡¼¥¶¤Î¥¨¥ó¥È¥ê¤Î¾¯¤Ê¤¯¤È¤â°ì¤Ä¤Ë 
\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬ÀßÄꤵ¤ì¤Æ¤¤¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£
.IP "never" 8
.IX Item "never"
¥æ¡¼¥¶¤Ï \fB\-v\fR ¥ª¥×¥·¥ç¥ó¤ò»ÈÍѤ¹¤ëºÝ¤Ë¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ¹¤ëɬÍפ¬
¤Þ¤Ã¤¿¤¯¤Ê¤¤¡£
.RE
.RS 12
.Sp
Ãͤò»ØÄꤷ¤Ê¤¤¤È¡¢ÃÍ¤Ï \fIall\fR ¤À¤È¸«¤Ê¤µ¤ì¤ë¡£'!' ¤òƬ¤ËÉÕ¤±¤Æ¡¢
¤³¤Î¥ª¥×¥·¥ç¥ó¤òÈÝÄꤹ¤ë¤È¡¢ÃÍ¤Ë \fInever\fR ¤¬»È¤ï¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£
¥Ç¥Õ¥©¥ë¥È¤Ï \fIall\fR ¤Ç¤¢¤ë¡£
.RE
.PP
\&\fB¿¿µ¶ÃͤȤ·¤Æ¤â»ÈÍѤǤ­¤ë¥ê¥¹¥È\fR:
.IP "env_check" 16
.IX Item "env_check"
ÊÑ¿ô¤ÎÃÍ¤Ë \f(CW\*(C`%\*(C'\fR ¤ä \f(CW\*(C`/\*(C'\fR ¤¬´Þ¤Þ¤ì¤ë¾ì¹ç¤Ë¡¢
¥æ¡¼¥¶¤Î´Ä¶­¤«¤é¼è¤ê½ü¤«¤ì¤ë´Ä¶­ÊÑ¿ô¡£
¤³¤Îµ¡Ç½¤Ï¡¢½ÐÍè¤Î¤è¤¯¤Ê¤¤¥×¥í¥°¥é¥à¤Ë¸«¤é¤ì¤ë printf ·Á¼°¤Î¥Õ¥©¡¼¥Þ¥Ã¥È¤Î
ÀȼåÀ­¤ËÂн褹¤ë¤¿¤á¤ËÍøÍѤǤ­¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Î°ú¤­¿ô¤Ï¡¢
¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç°Ï¤Þ¤ì¡¢¥¹¥Ú¡¼¥¹¤Ç¶èÀÚ¤é¤ì¤¿¥ê¥¹¥È¤Ç¤â¤è¤¯¡¢
¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ê¤·¤Îñ°ì¤ÎÃͤǤâ¤è¤¤¡£¥ê¥¹¥È¤Ï¡¢\f(CW\*(C`=\*(C'\fR,
\&\f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR, \f(CW\*(C`!\*(C'\fR ±é»»»Ò¤ò
»È¤Ã¤Æ¡¢¤½¤ì¤¾¤ìÃÖ¤­´¹¤¨¤¿¤ê¡¢Äɲä·¤¿¤ê¡¢ºï½ü¤·¤¿¤ê¡¢Ìµ¸ú¤Ë¤·¤¿¤ê
¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£\fIenv_check\fR ¤Ç»ØÄꤵ¤ì¤¿ÊÑ¿ô¤Ï¡¢
\&\fIenv_reset\fR ¥ª¥×¥·¥ç¤ÎÍ­¸ú¡¦Ìµ¸ú¤Ë¤«¤«¤ï¤é¤º¡¢¾åµ­¤Î¥Á¥§¥Ã¥¯¤Ë
¥Ñ¥¹¤¹¤ì¤Ð¡¢´Ä¶­¤ËÊݸ¤µ¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£¥Á¥§¥Ã¥¯¤µ¤ì¤ë´Ä¶­ÊÑ¿ô¤Î
¥Ç¥Õ¥©¥ë¥È¤Î¥ê¥¹¥È¤Ï¡¢root ¥æ¡¼¥¶¤¬ \fBsudo\fR ¤Ë \&\fI\-V\fR ¥ª¥×¥·¥ç¥ó¤ò
ÉÕ¤±¤Æ¼Â¹Ô¤·¤¿¤È¤­¤Ëɽ¼¨¤µ¤ì¤ë¡£
.IP "env_delete" 16
.IX Item "env_delete"
\&\fIenv_reset\fR ¥ª¥×¥·¥ç¥ó¤¬Ìµ¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤ë¤È¤­¤Ë¡¢¥æ¡¼¥¶¤Î´Ä¶­¤«¤é
¼è¤ê½ü¤«¤ì¤ë´Ä¶­ÊÑ¿ô¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Î°ú¤­¿ô¤Ï¡¢¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç°Ï¤Þ¤ì¡¢
¥¹¥Ú¡¼¥¹¤Ç¶èÀÚ¤é¤ì¤¿¥ê¥¹¥È¤Ç¤â¤è¤¯¡¢¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ê¤·¤Îñ°ì¤ÎÃͤǤâ¤è¤¤¡£
¥ê¥¹¥È¤Ï¡¢\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR,
\&\f(CW\*(C`!\*(C'\fR ±é»»»Ò¤ò»È¤Ã¤Æ¡¢¤½¤ì¤¾¤ìÃÖ¤­´¹¤¨¤¿¤ê¡¢Äɲä·¤¿¤ê¡¢
ºï½ü¤·¤¿¤ê¡¢Ìµ¸ú¤Ë¤·¤¿¤ê¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¼è¤ê½ü¤«¤ì¤ë´Ä¶­ÊÑ¿ô¤Î
¥Ç¥Õ¥©¥ë¥È¤Î¥ê¥¹¥È¤Ï¡¢root ¥æ¡¼¥¶¤¬ \fBsudo\fR ¤Ë \fI\-V\fR ¥ª¥×¥·¥ç¥ó¤ò
ÉÕ¤±¤Æ¼Â¹Ô¤·¤¿¤È¤­¤Ëɽ¼¨¤µ¤ì¤ë¡£Î±°Õ¤¹¤Ù¤­¤Ï¡¢¥ª¥Ú¥ì¡¼¥Æ¥£¥ó¥°¥·¥¹¥Æ¥à¤Ë¤Ï¡¢
´í¸±¤ò¤â¤¿¤é¤·¤«¤Í¤Ê¤¤ÊÑ¿ô¤ò¤¤¤«¤Ê¤ë setuid ¥×¥í¥»¥¹ (\fBsudo\fR ¤â
¤½¤Î°ì¤Ä) ¤Î´Ä¶­¤«¤é¤â¼è¤ê½ü¤¯¤³¤È¤Ë¤·¤Æ¤¤¤ë¤â¤Î¤¬Â¿¤¤¤È¤¤¤¦¤³¤È¤Ç¤¢¤ë¡£
.IP "env_keep" 16
.IX Item "env_keep"
\&\fIenv_reset\fR ¥ª¥×¥·¥ç¥ó¤¬Í­¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤ë¤È¤­¤Ç¤â¡¢¥æ¡¼¥¶¤Î´Ä¶­¤Ë
¤½¤Î¤Þ¤ÞÊݸ¤µ¤ì¤ë´Ä¶­ÊÑ¿ô¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤Æ¡¢\fBsudo\fR ¤«¤é
À¸¤ß½Ð¤µ¤ì¤ë¥×¥í¥»¥¹¤¬¼õ¤±¼è¤ë´Ä¶­¤ò¡¢¤­¤áºÙ¤«¤¯À©¸æ¤¹¤ë¤³¤È¤¬²Äǽ¤Ë¤Ê¤ë¡£
¤³¤Î¥ª¥×¥·¥ç¥ó¤Î°ú¤­¿ô¤Ï¡¢¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç°Ï¤Þ¤ì¡¢¥¹¥Ú¡¼¥¹¤Ç¶èÀÚ¤é¤ì¤¿¥ê
¥¹¥È¤Ç¤â¤è¤¯¡¢¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ê¤·¤Îñ°ì¤ÎÃͤǤâ¤è¤¤¡£¥ê¥¹¥È¤Ï¡¢
\&\f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR,
\&\f(CW\*(C`!\*(C'\fR ±é»»»Ò¤ò»È¤Ã¤Æ¡¢¤½¤ì¤¾¤ìÃÖ¤­´¹¤¨¤¿¤ê¡¢
Äɲä·¤¿¤ê¡¢ºï½ü¤·¤¿¤ê¡¢Ìµ¸ú¤Ë¤·¤¿¤ê¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£Êݸ¤µ¤ì¤ëÊÑ¿ô¤Î
¥Ç¥Õ¥©¥ë¥È¤Î¥ê¥¹¥È¤Ï¡¢root ¥æ¡¼¥¶¤¬ \fBsudo\fR ¤Ë \fI\-V\fR ¥ª¥×¥·¥ç¥ó¤ò
ÉÕ¤±¤Æ¼Â¹Ô¤·¤¿¤È¤­¤Ëɽ¼¨¤µ¤ì¤ë¡£
.PP
\fIsyslog\fR\|(3) ·Ðͳ¤Ç¥í¥°¤òµ­Ï¿¤¹¤ë¾ì¹ç¡¢\fBsudo\fR ¤Ï syslog ¤Î¥Õ¥¡
¥·¥ê¥Æ¥£ (facility: \fBsyslog\fR ¥Ñ¥é¥á¡¼¥¿¤ÎÃÍ) ¤È¤·¤Æ¼¡¤ÎÃͤò¼õ¤±ÉÕ
¤±¤ë¡£\fBauthpriv\fR (¤¿¤À¤·¡¢\s-1OS\s0 ¤¬¥µ¥Ý¡¼¥È¤·¤Æ¤¤¤ë¤Ê¤é¤Ð¤À¤¬)¡¢
\&\fBauth\fR, \fBdaemon\fR, \fBuser\fR, \fBlocal0\fR, \fBlocal1\fR,
\&\fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR,
\&\fBlocal6\fR, \fBlocal7\fR¡£syslog ¤ÎÍ¥Àè½ç°Ì (priority) ¤Ë¤Ä¤¤¤Æ¤Ï¡¢
¼¡¤Î¤â¤Î¤ËÂбþ¤·¤Æ¤¤¤ë¡£\fBalert\fR, \fBcrit\fR, \fBdebug\fR,
\&\fBemerg\fR, \fBerr\fR, \fBinfo\fR, \fBnotice\fR, \fBwarning\fR¡£
.SH "¥Õ¥¡¥¤¥ë"
.IX Header "FILES"
.ie n .IP "\fI/etc/sudoers\fR" 24
.el .IP "\fI/etc/sudoers\fR" 24
.IX Item "/etc/sudoers"
郎²¿¤ò¼Â¹Ô¤Ç¤­¤ë¤«¤Î¥ê¥¹¥È
.IP "\fI/etc/group\fR" 24
.IX Item "/etc/group"
¥í¡¼¥«¥ë¤Î¥°¥ë¡¼¥×¥Õ¥¡¥¤¥ë
.IP "\fI/etc/netgroup\fR" 24
.IX Item "/etc/netgroup"
¥Í¥Ã¥È¥ï¡¼¥¯¥°¥ë¡¼¥×¤Î¥ê¥¹¥È
.SH "ÍÑÎã"
.IX Header "EXAMPLES"
°Ê²¼¤Ï sudoers ¥¨¥ó¥È¥ê¤Î¸«ËܤǤ¢¤ë¡£ÀµÄ¾¤Ê¤È¤³¤í¡¢¤¤¤µ¤µ¤«
¶Å¤ê¤¹¤®¤ÎÉôʬ¤â¤¢¤ë¡£¤Þ¤ººÇ½é¤Ë¥¨¥¤¥ê¥¢¥¹¤òÄêµÁ¤¹¤ë¡£
.PP
.Vb 4
\& # User alias ¤Î»ØÄê
\& User_Alias     FULLTIMERS = millert, mikef, dowdy
\& User_Alias     PARTTIMERS = bostley, jwfox, crawl
\& User_Alias     WEBMASTERS = will, wendy, wim
\&
\& # Runas alias ¤Î»ØÄê
\& Runas_Alias    OP = root, operator
\& Runas_Alias    DB = oracle, sybase
\& Runas_Alias    ADMINGRP = adm, oper
\&
\& # Host alias ¤Î»ØÄê
\& Host_Alias     SPARC = bigtime, eclipse, moet, anchor :\e
\&                SGI = grolsch, dandelion, black :\e
\&                ALPHA = widget, thalamus, foobar :\e
\&                HPPA = boa, nag, python
\& Host_Alias     CUNETS = 128.138.0.0/255.255.0.0
\& Host_Alias     CSNETS = 128.138.243.0, 128.138.204.0/24, 128.138.242.0
\& Host_Alias     SERVERS = master, mail, www, ns
\& Host_Alias     CDROM = orion, perseus, hercules
\&
\& # Cmnd alias ¤Î»ØÄê
\& Cmnd_Alias     DUMPS = /usr/bin/mt, /usr/sbin/dump, /usr/sbin/rdump,\e
\&                        /usr/sbin/restore, /usr/sbin/rrestore
\& Cmnd_Alias     KILL = /usr/bin/kill
\& Cmnd_Alias     PRINTING = /usr/sbin/lpc, /usr/bin/lprm
\& Cmnd_Alias     SHUTDOWN = /usr/sbin/shutdown
\& Cmnd_Alias     HALT = /usr/sbin/halt
\& Cmnd_Alias     REBOOT = /usr/sbin/reboot
\& Cmnd_Alias     SHELLS = /usr/bin/sh, /usr/bin/csh, /usr/bin/ksh, \e
\&                         /usr/local/bin/tcsh, /usr/bin/rsh, \e
\&                         /usr/local/bin/zsh
\& Cmnd_Alias     SU = /usr/bin/su
\& Cmnd_Alias     PAGERS = /usr/bin/more, /usr/bin/pg, /usr/bin/less
.Ve
.PP
°Ê²¼¤Ç¤Ï¡¢¥³¥ó¥Ñ¥¤¥ë»þ¤ËËä¤á¹þ¤Þ¤ì¤¿¥Ç¥Õ¥©¥ë¥ÈÃͤΤ¤¤¯¤Ä¤«¤òÊѹ¹¤·¤Æ¤¤¤ë¡£
\&\fBsudo\fR ¤Ë¤Ï \fIsyslog\fR\|(3) ·Ðͳ¤Ç¥í¥°¤òµ­Ï¿¤·¡¢¥Õ¥¡¥·¥ê¥Æ¥£¤Ë¤Ï
¤¹¤Ù¤Æ¤Î¾ì¹ç¤Ë \fIauth\fR ¤ò»ÈÍѤµ¤»¤¿¤¤¡£¥Õ¥ë¥¿¥¤¥à¤Î¥¹¥¿¥Ã¥Õ¤Ë¤Ï 
\&\fBsudo\fR ¤Î·±²ü¤ò½Ð¤µ¤Ê¤¤¤è¤¦¤Ë¤·¤¿¤¤¡£¥æ¡¼¥¶ \fBmillert\fR ¤Ï
¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ·¤Ê¤¤¤Ç¤è¤¤¡£¥³¥Þ¥ó¥É¤ò root ¤È¤·¤Æ¼Â¹Ô¤¹¤ë¤È¤­¤Ï¡¢
´Ä¶­ÊÑ¿ô \f(CW\*(C`LOGNAME\*(C'\fR, \f(CW\*(C`USER\*(C'\fR,
\&\f(CW\*(C`USERNAME\*(C'\fR ¤òÊѹ¹¤·¤¿¤¯¤Ê¤¤¡£¤µ¤é¤Ë¡¢
\&\fI\s-1SERVERS\s0\fR ¤È¤¤¤¦ \f(CW\*(C`Host_Alias\*(C'\fR ¤Ë°¤¹¤ë
¥Þ¥·¥ó¤Ç¤Ï¡¢¥í¡¼¥«¥ë¤Ê¥í¥°¥Õ¥¡¥¤¥ë¤òÉûËܤȤ·¤Æºî¤ê¡¢¥í¥°¤Îµ­Æþ»ö¹à¤Ï
¿ôǯ¤ËÅϤäÆÊݸ¤µ¤ì¤ë¤Î¤Ç¡¢¥í¥°¤Î³Æ¹Ô¤Ë´Ö°ã¤¤¤Ê¤¯Ç¯ÅÙ¤¬Æþ¤ë¤è¤¦¤Ë¤¹¤ë¡£
ºÇ¸å¤Ë \s-1PAGERS\s0 ¤È¤¤¤¦ \f(CW\*(C`Cmnd_Alias\*(C'\fR ¤Ë°¤¹¤ë
¥³¥Þ¥ó¥É (\fI/usr/bin/more\fR, \fI/usr/bin/pg\fR, \fI/usr/bin/less\fR) 
¤Ë¤Ä¤¤¤Æ¤Ï¡¢¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤ò̵¸ú¤Ë¤¹¤ë¡£
.PP
.Vb 7
\& # built-in defaults ¤ÎÊѹ¹
\& Defaults               syslog=auth
\& Defaults>root          !set_logname
\& Defaults:FULLTIMERS    !lecture
\& Defaults:millert       !authenticate
\& Defaults@SERVERS       log_year, logfile=/var/log/sudo.log
\& Defaults!PAGERS        noexec
.Ve
.PP
¥æ¡¼¥¶ÀßÄ꤬¡¢Ã¯¤¬²¿¤ò¼Â¹Ô¤Ç¤­¤ë¤«¤ò¼ÂºÝ¤Ë·è¤á¤Æ¤¤¤ëÉôʬ¤À¡£
.PP
.Vb 2
\& root           ALL = (ALL) ALL
\& %wheel         ALL = (ALL) ALL
.Ve
.PP
\&\fBroot\fR ¤È \fBwheel\fR ¥°¥ë¡¼¥×¤Î¤¹¤Ù¤Æ¤Î¥æ¡¼¥¶¤Ë¤Ï¡¢¤É¤Î¥Û¥¹¥È¤Ç¤â
Ǥ°Õ¤Î¥æ¡¼¥¶¤È¤·¤Æ¤¤¤«¤Ê¤ë¥³¥Þ¥ó¥É¤Ç¤â¼Â¹Ô¤¹¤ë¤³¤È¤òǧ¤á¤ë¡£
.PP
.Vb 1
\& FULLTIMERS     ALL = NOPASSWD: ALL
.Ve
.PP
¥Õ¥ë¥¿¥¤¥à¤Î¥·¥¹¥Æ¥à´ÉÍý¼Ô (\fBmillert\fR, \fBmikef\fR, \fBdowdy\fR) 
¤Ï¡¢¤É¤Î¥Û¥¹¥È¤Ç¤âǤ°Õ¤Î¥³¥Þ¥ó¥É¤òǧ¾Ú¤Ê¤·¤Ç¼Â¹Ô¤Ç¤­¤ë¡£
.PP
.Vb 1
\& PARTTIMERS     ALL = ALL
.Ve
.PP
¥Ñ¡¼¥È¥¿¥¤¥à¤Î¥·¥¹¥Æ¥à´ÉÍý¼Ô ((\fBbostley\fR, \fBjwfox\fR,
\&\fBcrawl\fR) ¤Ï¡¢¤É¤Î¥Û¥¹¥È¤Ç¤âǤ°Õ¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë¤¬¡¢
¤½¤ÎºÝ¤Ëǧ¾Ú¤ò¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤ (¤³¤Î¥¨¥ó¥È¥ê¤Ë¤Ï 
\&\f(CW\*(C`NOPASSWD\*(C'\fR ¥¿¥°¤¬»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¤Î¤Ç)¡£
.PP
.Vb 1
\& jack           CSNETS = ALL
.Ve
.PP
¥æ¡¼¥¶ \fBjack\fR ¤Ï¡¢\fI\s-1CSNETS\s0\fR ¤È¤¤¤¦¥¨¥¤¥ê¥¢¥¹¤Ë°¤¹¤ë¥Þ¥·¥ó¤Ç
Ǥ°Õ¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë (¤¹¤Ê¤ï¤Á¡¢¥Í¥Ã¥È¥ï¡¼¥¯¤¬ \f(CW128.138.243.0\fR,
\&\f(CW128.138.204.0\fR, \f(CW128.138.242.0\fR ¤Î¥Þ¥·¥ó¤À)¡£¤³¤ÎÆâ¡¢
\&\f(CW128.138.204.0\fR ¤Ë¤Î¤ß class C ¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ç¤¢¤ë¤³¤È¤ò¼¨¤¹
ÌÀ¼¨Åª¤Ê (\s-1CIDR\s0 ɽµ­¤Î) netmask ¤¬¤¢¤ë¡£\fI\s-1CSNETS\s0\fR ¤Î
¤Û¤«¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¤Ä¤¤¤Æ¤Ï¡¢¥í¡¼¥«¥ë¥Þ¥·¥ó¤Î netmask ¤¬¥Þ¥Ã¥Á¥ó¥°¤ÎºÝ¤Ë
»È¤ï¤ì¤ë¤³¤È¤Ë¤Ê¤ë¡£
.PP
.Vb 1
\& lisa           CUNETS = ALL
.Ve
.PP
¥æ¡¼¥¶ \fBlisa\fR ¤Ï¥¨¥¤¥ê¥¢¥¹¤¬ \fI\s-1CUNETS\s0\fR ¤Î¤¤¤«¤Ê¤ë¥Û¥¹¥È¤Ç¤â
Ǥ°Õ¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë (¤¹¤Ê¤ï¤Á¡¢
\f(CW128.138.0.0\fR ¤È¤¤¤¦ class B ¥Í¥Ã¥È¥ï¡¼¥¯¤Î¥Þ¥·¥ó¤À)¡£
.PP
.Vb 2
\& operator       ALL = DUMPS, KILL, SHUTDOWN, HALT, REBOOT, PRINTING,\e
\&                sudoedit /etc/printcap, /usr/oper/bin/
.Ve
.PP
¥æ¡¼¥¶ \fBoperator\fR ¤Ï¡¢ÍÑÅÓ¤¬´Êñ¤ÊÊݼé´ÉÍý¤Ë¸ÂÄꤵ¤ì¤¿¥³¥Þ¥ó¥É¤ò
¼Â¹Ô¤Ç¤­¤ë¡£¤³¤Î¾ì¹ç¤½¤ì¤Ï¡¢¥Ð¥Ã¥¯¥¢¥Ã¥×¤·¤¿¤ê¡¢¥×¥í¥»¥¹¤ò kill ¤·¤¿¤ê¡¢
°õºþ¥·¥¹¥Æ¥à¤òÁàºî¤·¤¿¤ê¡¢¥·¥¹¥Æ¥à¤ò¥·¥ã¥Ã¥È¥À¥¦¥ó¤·¤¿¤ê¤¹¤ë¤Î¤Ë
´Ø·¸¤¹¤ë¥³¥Þ¥ó¥É¤È¡¢\fI/usr/oper/bin/\fR ¥Ç¥£¥ì¥¯¥È¥ê¤Ë¤¢¤ëǤ°Õ¤Î¥³¥Þ¥ó¥É
¤Ç¤¢¤ë¡£
.PP
.Vb 1
\& joe            ALL = /usr/bin/su operator
.Ve
.PP
¥æ¡¼¥¶ \fBjoe\fR ¤Ï \fIsu\fR\|(1) ¤ò»È¤Ã¤Æ operator ¤Ë¤Ê¤ë¤³¤È¤·¤«
¤Ç¤­¤Ê¤¤¡£
.PP
.Vb 1
\& %opers         ALL = (: ADMINGRP) /usr/sbin/
.Ve
.PP
\&\fBopers\fR ¥°¥ë¡¼¥×¤Î¥æ¡¼¥¶¤Ï¡¢\fI/usr/sbin/\fR ¤Ë¤¢¤ë¥³¥Þ¥ó¥É¤ò
¼«Ê¬¼«¿È¤Î»ñ³Ê¤Ç¡¢
\&\f(CW\*(C`Runas_Alias\*(C'\fR \fI\s-1ADMINGRP\s0\fR ¤Ë°¤¹¤ë
Ǥ°Õ¤Î¥°¥ë¡¼¥× (¤¹¤Ê¤ï¤Á¡¢\fBadm\fR ¤« \fBoper\fR ¥°¥ë¡¼¥×) ¤È¤·¤Æ
¼Â¹Ô¤Ç¤­¤ë¡£(ÌõÃí: ¼Â¤Î¤È¤³¤í¡¢sudo-1.7.2p1 ¤Ç¤Ï¡¢
\&\fI/etc/sudoers\fR ¤ÇÊѿȲÄǽ¥°¥ë¡¼¥×¤Ë \f(CW\*(C`Runas_Alias\*(C'\fR ¤ò
¤Þ¤À»ØÄê¤Ç¤­¤Ê¤¤¤è¤¦¤À¡£º£¤Î¤È¤³¤í¡¢¤³¤ÎÎã¤Ç¸À¤¦¤Ê¤é¡¢\fI\s-1ADMINGRP\s0\fR
¤Ç¤Ï¤Ê¤¯¡¢\fBadm\fR ¤ä \fBoper\fR ¤òľÀÜ»ØÄꤷ¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£)
.PP
.Vb 1
\& pete           HPPA = /usr/bin/passwd [A\-Za\-z]*, !/usr/bin/passwd root
.Ve
.PP
¥æ¡¼¥¶ \fBpete\fR ¤Ï \fI\s-1HPPA\s0\fR ¤Ë°¤¹¤ë¥Þ¥·¥ó¤Ç root °Ê³°¤Ê¤é
ï¤Î¥Ñ¥¹¥ï¡¼¥É¤Ç¤âÊѹ¹¤¹¤ë¤³¤È¤òµö¤µ¤ì¤Æ¤¤¤ë¡£¾åµ­¤Î»ØÄê¤Ï¡¢
\&\fIpasswd\fR\|(1) ¤¬¥³¥Þ¥ó¥É¥é¥¤¥ó¤ÇÊ£¿ô¤Î¥æ¡¼¥¶Ì¾¤ò¼õ¤±ÉÕ¤±¤Ê¤¤¤³¤È¤ò
Á°Äó¤È¤·¤Æ¤¤¤ëÅÀ¤ËÃí°Õ¤·¤Æ¤Û¤·¤¤¡£
.PP
.Vb 1
\& bob            SPARC = (OP) ALL : SGI = (OP) ALL
.Ve
.PP
¥æ¡¼¥¶ \fBbob\fR ¤Ï \fI\s-1SPARC\s0\fR ¤ä \fI\s-1SGI\s0\fR ¤Ë°¤¹¤ë
¥Þ¥·¥ó¤Ç \f(CW\*(C`Runas_Alias\*(C'\fR \fI\s-1OP\s0\fR ¤ËÅÐÏ¿¤µ¤ì¤Æ¤¤¤ë
Ǥ°Õ¤Î¥æ¡¼¥¶¤È¤·¤Æ (\fBroot\fR ¤È \fBoperator\fR ¤Ç¤¢¤ë) ¤É¤ó¤Ê¥³¥Þ¥ó¥É¤Ç¤â
¼Â¹Ô¤Ç¤­¤ë¡£
.PP
.Vb 1
\& jim            +biglab = ALL
.Ve
.PP
¥æ¡¼¥¶ \fBjim\fR ¤Ï \fIbiglab\fR ¥Í¥Ã¥È¥°¥ë¡¼¥×¤Ë°¤¹¤ë¥Þ¥·¥ó¤Ç
¤É¤ó¤Ê¥³¥Þ¥ó¥É¤Ç¤â¼Â¹Ô¤Ç¤­¤ë¡£\fBsudo\fR ¤Ï¡¢\*(L"biglab\*(R" ¤Ë '+' ¤Î
ÀÜƬ¼­¤¬ÉÕ¤¤¤Æ¤¤¤ë¤Î¤Ç¡¢¤½¤ì¤ò¥Í¥Ã¥È¥°¥ë¡¼¥×¤À¤Èǧ¼±¤¹¤ë¡£
.PP
.Vb 1
\& +secretaries   ALL = PRINTING, /usr/bin/adduser, /usr/bin/rmuser
.Ve
.PP
\&\fBsecretaries\fR ¥Í¥Ã¥È¥°¥ë¡¼¥×¤Î¥æ¡¼¥¶¤Ï¡¢¥æ¡¼¥¶¤ÎÄɲääºï½ü¤Ï
¤â¤Á¤í¤ó¡¢¥×¥ê¥ó¥¿¤Î´ÉÍý¤Ë¤â¶¨ÎϤ¹¤ëɬÍפ¬¤¢¤ë¡£¤½¤³¤Ç¡¢¤¹¤Ù¤Æ¤Î¥Þ¥·¥ó¤Ç
¤½¤Î¼ï¤Î¥³¥Þ¥ó¥É¤Î¼Â¹Ô¤òǧ¤á¤é¤ì¤Æ¤¤¤ë¡£
.PP
.Vb 1
\& fred           ALL = (DB) NOPASSWD: ALL
.Ve
.PP
¥æ¡¼¥¶ \fBfred\fR ¤Ï \f(CW\*(C`Runas_Alias\*(C'\fR \fI\s-1DB\s0\fR ¤Î
Ǥ°Õ¤Î¥æ¡¼¥¶¤È¤·¤Æ (\fBoracle\fR ¤« \fBsybase\fR ¤À) ¥Ñ¥¹¥ï¡¼¥É¤ò
ÆþÎϤ·¤Ê¤¤¤Ç¤â¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
.PP
.Vb 1
\& john           ALPHA = /usr/bin/su [!\-]*, !/usr/bin/su *root*
.Ve
.PP
¥æ¡¼¥¶ \fBjohn\fR ¤Ï \fI\s-1ALPHA\s0\fR ¤Ë°¤¹¤ë¥Þ¥·¥ó¤Ç \fIsu\fR\|(1) ¤ò
»È¤Ã¤Æ root °Ê³°¤Îï¤Ë¤Ç¤â¤Ê¤ë¤³¤È¤¬¤Ç¤­¤ë¤¬¡¢su ¤Ë¥ª¥×¥·¥ç¥ó¤ò
»ØÄꤹ¤ë¤³¤È¤Ïµö¤µ¤ì¤Æ¤¤¤Ê¤¤¡£
.PP
.Vb 1
\& jen            ALL, !SERVERS = ALL
.Ve
.PP
¥æ¡¼¥¶ \fBjen\fR ¤Ï \f(CW\*(C`Host_Alias\*(C'\fR \fI\s-1SERVERS\s0\fR ¤Ë
°¤¹¤ë¥Þ¥·¥ó (master, mail, www, ns) ¤ò½ü¤¯¤¤¤«¤Ê¤ë¥Þ¥·¥ó¤Ç¤â
Ǥ°Õ¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë¡£
.PP
.Vb 1
\& jill           SERVERS = /usr/bin/, !SU, !SHELLS
.Ve
.PP
\&\fBjill\fR ¤Ï \f(CW\*(C`Host_Alias\*(C'\fR \fI\s-1SERVERS\s0\fR ¤Î
¤¤¤«¤Ê¤ë¥Þ¥·¥ó¤Ç¤â \fI/usr/bin/\fR ¥Ç¥£¥ì¥¯¥È¥ê¤Ë¤¢¤ëǤ°Õ¤Î¥³¥Þ¥ó¥É¤ò
¼Â¹Ô¤Ç¤­¤ë¤¬¡¢\fI\s-1SU\s0\fR ¤ä \fI\s-1SHELLS\s0\fR ¤È¤¤¤¦
\&\f(CW\*(C`Cmnd_Aliases\*(C'\fR ¤Ë°¤¹¤ë¥³¥Þ¥ó¥É¤Ï¼Â¹Ô¤Ç¤­¤Ê¤¤¡£
.PP
.Vb 1
\& steve          CSNETS = (operator) /usr/local/op_commands/
.Ve
.PP
¥æ¡¼¥¶ \fBsteve\fR ¤Ï¥Ç¥£¥ì¥¯¥È¥ê \fI/usr/local/op_commands/\fR ¤Ë¤¢¤ë
Ǥ°Õ¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤Ç¤­¤ë¤¬¡¢operator ¤È¤¤¤¦¥æ¡¼¥¶¤È¤·¤Æ¼Â¹Ô¤Ç¤­¤ë¤À¤±¤À¡£
.PP
.Vb 1
\& matt           valkyrie = KILL
.Ve
.PP
\&\fBmatt\fR ¤â¼«Ê¬ÍѤΥ¥¯¥¹¥Æ¡¼¥·¥ç¥ó valkyrie ¤Ç
¥Ï¥ó¥°¤·¤¿¥×¥í¥»¥¹¤Î kill ¤°¤é¤¤¤Ï¤Ç¤­¤ëɬÍפ¬¤¢¤ë¡£
.PP
.Vb 1
\& WEBMASTERS     www = (www) ALL, (root) /usr/bin/su www
.Ve
.PP
¥Û¥¹¥È www ¤Ç \f(CW\*(C`User_Alias\*(C'\fR \fI\s-1WEBMASTERS\s0\fR ¤Ë
°¤¹¤ë¤¤¤«¤Ê¤ë¥æ¡¼¥¶¤â (will, wendy, wim ¤À)¡¢¥æ¡¼¥¶ www (web ¥Ú¡¼¥¸¤Î
½êÍ­¼Ô) ¤È¤·¤ÆǤ°Õ¤Î¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£
ñ¤Ë \fIsu\fR\|(1) ¤Ç www ¤Ë¤Ê¤Ã¤Æ¤â¤è¤¤¡£
.PP
.Vb 2
\& ALL            CDROM = NOPASSWD: /sbin/umount /CDROM,\e
\&                /sbin/mount \-o nosuid\e,nodev /dev/cd0a /CDROM
.Ve
.PP
¤¤¤«¤Ê¤ë¥æ¡¼¥¶¤â \f(CW\*(C`Host_Alias\*(C'\fR ¤¬ \s-1CDROM\s0 ¤Î
¥Þ¥·¥ó¤Ç (orion, perseus, hercules)¡¢¥Ñ¥¹¥ï¡¼¥É¤òÆþÎϤ¹¤ë¤³¤È¤Ê¤¯ 
CD-ROM ¤ò¥Þ¥¦¥ó¥È¡¢¥¢¥ó¥Þ¥¦¥ó¥È¤Ç¤­¤ë¡£¾åµ­¤Î¥³¥Þ¥ó¥É¤òÂǤÁ¹þ¤à¤Î¤Ï
¥æ¡¼¥¶¤Ë¤È¤Ã¤Æ¤¤¤µ¤µ¤«ÌÌÅݤʤΤǡ¢¥·¥§¥ë¥¹¥¯¥ê¥×¥È¤È¤·¤Æ
¥«¥×¥»¥ë²½¤·¤Æ¤·¤Þ¤¦¤Î¤¬¤è¤¤¤À¤í¤¦¡£
.IP "[\fBÌõÃí\fR]:" 8
.IX Item "footnote2"
ÅöÁ³¤È¸À¤¨¤ÐÅöÁ³¤À¤¬¡¢sudo ¤Ï¼«¥Û¥¹¥È¤Î /etc/sudoers ¤·¤«Æɤޤʤ¤¡£
¤½¤³¤Ç¡¢¤³¤¦¤¤¤¦¤³¤È¤Ë¤Ê¤ë¡£AAA ¤È¤¤¤¦¥Û¥¹¥È¤Ë aaa ¤È¤¤¤¦¥æ¡¼¥¶¤¬
¤¤¤ë¤È¤·¤è¤¦¡£¥Û¥¹¥È AAA ¤Î /etc/sudoers ¤Ë¡Ö¥Û¥¹¥È BBB ¤Ç¥æ¡¼¥¶ aaa ¤Ï
sudo ¤ò²ð¤·¤Æ /bin/ls ¤ò¼Â¹Ô¤Ç¤­¤ë¡×¤È¤¤¤¦µ­½Ò¤¬¤¢¤Ã¤¿¤È¤·¤Æ¤â¡¢
¥æ¡¼¥¶ aaa ¤¬¥Û¥¹¥È AAA ¤«¤é telnet ¤ä ssh ¤ò»È¤Ã¤¿¤È¤­¡¢¥Û¥¹¥È BBB ¾å¤Ç
sudo ·Ðͳ¤Ç ls ¤ò¼Â¹Ô¤Ç¤­¤ë¤ï¤±¤Ç¤Ï¤Ê¤¤¡£¤½¤ì¤¬¤Ç¤­¤ë¤¿¤á¤Ë¤Ï¡¢
¥Û¥¹¥È BBB ¤Î /etc/sudoers ¤Ë¡ÖBBB ¤Ç¥æ¡¼¥¶ aaa ¤Ï sudo ¤ò²ð¤·¤Æ /bin/ls ¤ò
¼Â¹Ô¤Ç¤­¤ë¡×¤È¤¤¤¦µ­½Ò¤¬¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤Î¤À¡£¥Û¥¹¥È BBB ¤Ç¼Â¹Ô¤¹¤ë
sudo ¤Ï BBB ¤Î sudo ¤Ç¤¢¤ê¡¢BBB ¤Î sudo ¤Ï BBB ¤Î /etc/sudoers ¤·¤«
Æɤޤʤ¤¤Î¤À¤«¤é¡£
.Sp
¤½¤ì¤Ç¤Ï¡¢²¿¸Î¡¢¾åµ­¤Î¡ÖÍÑÎã¡×¤Ç¼«¥Û¥¹¥È°Ê³°¤ÎÀßÄ꤬¹Ô¤ï¤ì¤Æ
¤¤¤ë¤Î¤«¡© ¤½¤â¤½¤â¡¢sudoers ¤Î½ñ¼°¤Ç¼«¥Û¥¹¥È°Ê³°¤Î¥Û¥¹¥È¤ò
»ØÄê¤Ç¤­¤ë¤Î¤Ï¡¢²¿¸Î¤Ê¤Î¤«¡© ¤½¤ì¤Ï¡¢´ÉÍý¤·¤Æ¤¤¤ë¥µ¥¤¥È¤Î
¤¹¤Ù¤Æ¤Î¥Û¥¹¥È¤ÎÀßÄê¤òµ­¤·¤¿ sudoers ¥Õ¥¡¥¤¥ë¤ò°ì¤Äºî¤Ã¤Æ¡¢¤½¤ì¤ò
¤¹¤Ù¤Æ¤Î¥Û¥¹¥È¤Ë¥³¥Ô¡¼¤·¤Æ»È¤¦¡¢¤½¤¦¤¤¤Ã¤¿»È¤¤Êý¤òÁÛÄꤷ¤Æ¤¤¤ë¤«¤é¤À¡£
¤â¤·¡¢¥µ¥¤¥ÈÃæ¤Î¤¹¤Ù¤Æ¤Î¥Û¥¹¥È¤ÎÀßÄê¤ò°ì¥ö½ê¤Ë¤Þ¤È¤á¤ÆÃÖ¤­¡¢
¤½¤ì¤ò¤¹¤Ù¤Æ¤Î¥Û¥¹¥È¤Ë¶¦Í­¤µ¤»¤¿¤¤¤Î¤Ê¤é (¤¹¤Ê¤ï¤Á¡¢sudo ¤ÎÀßÄê¤Î
½¸Ãæ´ÉÍý¤¬¤·¤¿¤¤¤Î¤Ê¤é)¡¢LDAP ¤ÎºÎÍѤò¹Í¤¨¤ë¤Ù¤­¤Ç¤¢¤ë¡£
.SH "¥»¥­¥å¥ê¥Æ¥£¤Ë´Ø¤¹¤ëÃí°ÕÅÀ"
.IX Header "SECURITY NOTES"
°ìÈÌŪ¤Ë¸À¤Ã¤Æ¡¢±é»»»Ò '!' ¤ò»ÈÍѤ·¤Æ \f(CW\*(C`ALL\*(C'\fR ¤«¤é
¥³¥Þ¥ó¥É¤Î¡Ö°ú¤­»»¡×¤ò¤¹¤ë¤³¤È¤Ï¡¢¤¢¤Þ¤ê¸ú²Ì¤¬¤Ê¤¤¡£¥æ¡¼¥¶¤Ï¼Â¹Ô¤·¤¿¤¤
¥³¥Þ¥ó¥É¤ò̾Á°¤òÊѤ¨¤Æ¥³¥Ô¡¼¤·¡¢¤½¤ì¤«¤é¤½¤ì¤ò¼Â¹Ô¤¹¤ë¤¹¤ë¤È¤¤¤Ã¤¿
¤Á¤ç¤Ã¤È¤·¤¿¼êÃʤǡ¢Î¢¤ò¤«¤¯¤³¤È¤¬¤Ç¤­¤ë¤«¤é¤À¡£¤¿¤È¤¨¤Ð¡¢
.PP
.Vb 1
\&    bill        ALL = ALL, !SU, !SHELLS
.Ve
.PP
¤È¤¤¤¦¹Ô¤Ï¡¢\fI\s-1SU\s0\fR ¤ä \fI\s-1SHELLS\s0\fR ¤ËÎóµ­¤µ¤ì¤Æ¤¤¤ë
¥³¥Þ¥ó¥É¤Î \fBbill\fR ¤Ë¤è¤ë¼Â¹Ô¤òËÜÅö¤ËÁ˻ߤ¹¤ë¤³¤È¤Ë¤Ï¤Ê¤é¤Ê¤¤¡£
¤Ê¤¼¤Ê¤é¡¢\fBbill\fR ¤È¤·¤Æ¤Ï¡¢¤½¤¦¤·¤¿¥³¥Þ¥ó¥É¤òñ¤Ë̾Á°¤òÊѤ¨¤Æ
¥³¥Ô¡¼¤¹¤ì¤Ð¤è¤¤¤·¡¢¥¨¥Ç¥£¥¿¤ä¤Û¤«¤Î¥×¥í¥°¥é¥à¤«¤é¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤ò
ÍøÍѤ¹¤ë¤³¤È¤â¤Ç¤­¤ë¤«¤é¤À¡£¤À¤«¤é¡¢¤³¤Î¼ï¤ÎÀ©¸Â¤Ï¤ä¤Ã¤¿Êý¤¬¤Þ¤·ÄøÅÙ¤Ë
¹Í¤¨¤Æ¤ª¤¯¤Ù¤­¤À (¤½¤·¤Æ¡¢¤·¤Ã¤«¤ê¤·¤¿±¿ÍÑÊý¿Ë¤Ë¤è¤Ã¤ÆÀ©¸Â¤Î¼Â¸úÎϤò
¾å¤²¤ë¤Ù¤­¤Ç¤¢¤ë)¡£
.SH "¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤òËɻߤ¹¤ë"
.IX Header "PREVENTING SHELL ESCAPES"
\&\fBsudo\fR ¤¬¤¢¤ë¥×¥í¥°¥é¥à¤ò¼Â¹Ô¤·¤Æ¤·¤Þ¤¦¤È¡¢¤½¤Î¥×¥í¥°¥é¥à¤Ï¡¢
¤Û¤«¤Î¥×¥í¥°¥é¥à¤Î¼Â¹Ô¤â´Þ¤á¤Æ¡¢²¿¤Ç¤â¼«Í³¤Ë¹¥¤­¤Ê¤³¤È¤¬¤Ç¤­¤ë¡£
¤³¤Î¤³¤È¤¬¥»¥­¥å¥ê¥Æ¥£¾å¤ÎÌäÂê¤Ë¤Ê¤ê¤«¤Í¤Ê¤¤¤Î¤Ï¡¢¥×¥í¥°¥é¥à¤¬
¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤òµö¤·¤Æ¤¤¤ë¤Î¤ÏÄÁ¤·¤¤¤³¤È¤Ç¤Ï¤Ê¤¯¡¢¤½¤Î¤¿¤á¤Ë
¥æ¡¼¥¶¤¬ \fBsudo\fR ¤Î¥¢¥¯¥»¥¹À©¸æ¤ä¥í¥®¥ó¥°¤ò¤¹¤êÈ´¤±¤ë¤³¤È¤¬
²Äǽ¤Ë¤Ê¤ë¤«¤é¤À¡£¤è¤¯»È¤¦¥×¥í¥°¥é¥à¤Ç¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤ò
µö¤·¤Æ¤¤¤ë¤â¤Î¤Ë¤Ï¡¢¼¡¤Î¤è¤¦¤Ê¤â¤Î¤¬¤¢¤ë¡£
(ÅöÁ³¤Ê¤¬¤é) ¥·¥§¥ë¡¢¥¨¥Ç¥£¥¿¡¢¥Ú¡¼¥¸¥ã¡¢¥á¡¼¥é¡¢¥¿¡¼¥ß¥Ê¥ë¡£
.PP
¤³¤ÎÌäÂê¤ËÂн褹¤ë¤Ë¤Ï¡¢´ðËÜŪ¤ËÆó¤Ä¤ÎÊýË¡¤¬¤¢¤ë¡£
.IP "À©¸Â" 10
.IX Item "restrict"
¥æ¡¼¥¶¤ËǤ°Õ¤Î¥³¥Þ¥ó¥É¤Î¼Â¹Ô¤òµö¤¹¤è¤¦¤Ê¥³¥Þ¥ó¥É¤ËÂФ·¤Æ¡¢¥æ¡¼¥¶¤¬
¥¢¥¯¥»¥¹¤Ç¤­¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¡£¥¨¥Ç¥£¥¿¤Î¾ì¹ç¤Ï¡¢À©¸Â¥â¡¼¥É¤È¾Î¤·¤Æ¡¢
¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤¬»È¤¨¤Ê¤¤¥â¡¼¥É¤ò»ý¤Ã¤Æ¤¤¤ë¤â¤Î¤â¿¤¤¡£
¤â¤Ã¤È¤â¡¢\fBsudo\fR ·Ðͳ¤Ç¥¨¥Ç¥£¥¿¤ò»È¤¦¤Î¤Ê¤é¡¢
\&\fBsudoedit\fR ¤ò»ÈÍѤ¹¤ëÊý¤¬¤è¤ê¤¹¤°¤ì¤¿Âкö¤Ç¤¢¤ë¡£
¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤òÄ󶡤¹¤ë¥×¥í¥°¥é¥à¤Ï¤¿¤¯¤µ¤ó¤¢¤ë¤Î¤Ç¡¢
¤½¤ì¤òÄ󶡤·¤Ê¤¤¥×¥í¥°¥é¥à¤Î¤ß¤ò»ÈÍѤ¹¤ë¤è¤¦¤Ë¥æ¡¼¥¶¤òÀ©¸Â¤¹¤ë¤Î¤Ï¡¢
¤¿¤¤¤Æ¤¤¼Â¸½ÉÔ²Äǽ¤Ç¤¢¤ë¡£
.IP "noexec" 10
.IX Item "noexec"
¶¦Í­¥é¥¤¥Ö¥é¥ê¤ò¥µ¥Ý¡¼¥È¤·¤Æ¤¤¤ë¿¤¯¤Î¥·¥¹¥Æ¥à¤Ë¤Ï¡¢´Ä¶­ÊÑ¿ô (¤¿¤¤¤Æ¤¤¤Ï 
\&\f(CW\*(C`LD_PRELOAD\*(C'\fR) ¤ÇÊ̤ζ¦Í­¥é¥¤¥Ö¥é¥ê¤ò»ØÄꤹ¤ë¤³¤È¤Ë¤è¤Ã¤Æ¡¢
¥Ç¥Õ¥©¥ë¥È¤Î¥é¥¤¥Ö¥é¥ê´Ø¿ô¤òÃÖ¤­´¹¤¨¤ëǽÎϤ¬¤¢¤ë¡£
¤½¤¦¤¤¤Ã¤¿¥·¥¹¥Æ¥à¤Ç¤Ï¡¢\fBsudo\fR ¤Î \fInoexec\fR µ¡Ç½¤ò»È¤¨¤Ð¡¢
\&\fBsudo\fR ¤«¤é¼Â¹Ô¤µ¤ì¤ë¥×¥í¥°¥é¥à¤¬¡¢²¿¤«¤Û¤«¤Î¥×¥í¥°¥é¥à¤ò¼Â¹Ô¤¹¤ë¤Î¤ò
Ëɤ°¤³¤È¤¬¤Ç¤­¤ë¡£¤È¤Ï¸À¤¨¡¢¤³¤ì¤¬Åö¤Æ¤Ï¤Þ¤ë¤Î¤Ï¡¢Æ°Åª¤Ë¥ê¥ó¥¯¤µ¤ì¤¿
¥Í¥¤¥Æ¥£¥Ö¤Ê¥×¥í¥°¥é¥à¤À¤±¤À¤È¤¤¤¦¤³¤È¤Ëµ¤¤òÉÕ¤±¤Æ¤Û¤·¤¤¡£
ÀÅŪ¤Ë¥ê¥ó¥¯¤µ¤ì¤¿¥×¥í¥°¥é¥à¤ä¡¢¥Ð¥¤¥Ê¥ê¡¦¥¨¥ß¥å¥ì¡¼¥·¥ç¥ó¤Î¤â¤È¤Ç
Æ°¤¯¤Û¤«¤Î OS ¤Î¥×¥í¥°¥é¥à¤Ë¤Ï¸ú²Ì¤¬¤Ê¤¤¡£
.Sp
\&\fBsudo\fR ¤¬ \fInoexec\fR ¤ËÂбþ¤·¤Æ¤¤¤ë¤«¤É¤¦¤«¤òÃΤꤿ¤«¤Ã¤¿¤é¡¢
root ¥æ¡¼¥¶¤Ë¤Ê¤Ã¤Æ¼¡¤Î¤è¤¦¤Ë¼Â¹Ô¤·¤Æ¤ß¤ì¤Ð¤è¤¤¡£
.Sp
.Vb 1
\&    sudo \-V | grep "dummy exec"
.Ve
.Sp
¤½¤Î½ÐÎϤˤ³¤ó¤Ê¤Õ¤¦¤Ë»Ï¤Þ¤ë¹Ô¤¬¤¢¤ì¤Ð¡¢
.Sp
.Vb 1
\&    File containing dummy exec functions:
.Ve
.Sp
¤½¤Î¤È¤­¤Ï¡¢¤¿¤Ö¤ó \fBsudo\fR ¤¬É¸½à¥é¥¤¥Ö¥é¥ê¤Ë¤¢¤ë exec ¥Õ¥¡¥ß¥ê¡¼¤Î´Ø¿ô¤ò¡¢
ñ¤Ë¥¨¥é¡¼¤òÊÖ¤¹¤À¤±¤Î¼«Ê¬¼«¿È¤Î´Ø¿ô¤ÇÃÖ¤­´¹¤¨¤é¤ì¤ë¤È¤¤¤¦¤³¤È¤À¡£
»ÄÇ°¤Ê¤¬¤é¡¢\fInoexec\fR ¤¬Í­¸ú¤«¤É¤¦¤«¡¢¥³¥ó¥Ñ¥¤¥ë»þ¤Ë³Î¤«¤á¤ë
ÀäÂгμ¤ÊÊýË¡¤Ï¤Ê¤¤¡£\fInoexec\fR ¤Ï SunOS, Solaris, *BSD, Linux,
\&\s-1IRIX\s0, Tru64 \s-1UNIX\s0, MacOS X, HP-UX 11.x ¤Ç»È¤¨¤ë¤Ï¤º¤À¡£
\&\s-1AIX\s0 ¤È UnixWare ¤Ç¤Ï»È¤¨¤Ê¤¤¤³¤È¤¬¤ï¤«¤Ã¤Æ¤¤¤ë¡£´Ä¶­ÊÑ¿ô 
\&\f(CW\*(C`LD_PRELOAD\*(C'\fR ¤ò¥µ¥Ý¡¼¥È¤·¤Æ¤¤¤ë¤¿¤¤¤Æ¤¤¤Î OS ¤Ê¤é¡¢
\&\fInoexec\fR ¤¬»È¤¨¤ë¤È»×¤¦¡£»ÈÍѤ·¤Æ¤¤¤ë¥ª¥Ú¥ì¡¼¥Æ¥£¥ó¥°¥·¥¹¥Æ¥à¤Î
¥Þ¥Ë¥å¥¢¥ë¥Ú¡¼¥¸¤òÄ´¤Ù¤Æ¡¢¥À¥¤¥Ê¥ß¥Ã¥¯¡¦¥ê¥ó¥«¤Ë¤Ä¤¤¤Æ (ÄÌÎã ld.so,
ld.so.1, dyld, dld.sl, rld, loader ¤È¤¤¤Ã¤¿Ì¾Á°¤Ë¤Ê¤Ã¤Æ¤¤¤ë) 
\&\f(CW\*(C`LD_PRELOAD\*(C'\fR ¤¬¥µ¥Ý¡¼¥È¤µ¤ì¤Æ¤¤¤ë¤«¤É¤¦¤«³Îǧ¤·¤Æ¤Û¤·¤¤¡£
.Sp
¤¢¤ë¥³¥Þ¥ó¥É¤ËÂФ·¤Æ \fInoexec\fR ¤òÍ­¸ú¤Ë¤¹¤ë¤Ë¤Ï¡¢
¾åµ­¡Ö¥æ¡¼¥¶¤ÎÀßÄê¡×¥»¥¯¥·¥ç¥ó¤Ç½Ò¤Ù¤¿¤è¤¦¤Ë¡¢\f(CW\*(C`NOEXEC\*(C'\fR ¥¿¥°¤ò
»ÈÍѤ¹¤ë¡£¤½¤Î¤È¤­¤ÎÎã¤òºÆ·Ç¤·¤è¤¦¡£
.Sp
.Vb 1
\& aaron  shanty = NOEXEC: /usr/bin/more, /usr/bin/vi
.Ve
.Sp
¤³¤ÎÎã¤Ç¤Ï¡¢¥æ¡¼¥¶ \fBaaron\fR ÂФ·¤Æ¡¢\fInoexec\fR ¤òÍ­¸ú¤Ë¤·¤¿¾å¤Ç¡¢
\&\fI/usr/bin/more\fR ¤È \fI/usr/bin/vi\fR ¤Î¼Â¹Ô¤òµö²Ä¤·¤Æ¤¤¤ë¡£
¤³¤Î¤è¤¦¤Ë¤¹¤ì¤Ð¡¢¤³¤ÎÆó¤Ä¤Î¥³¥Þ¥ó¥É¤«¤é (¥·¥§¥ë¤Î¤è¤¦¤Ê) ¤Û¤«¤Î¥³¥Þ¥ó¥É¤ò
¼Â¹Ô¤¹¤ë¤³¤È¤¬¤Ç¤­¤Ê¤¯¤Ê¤ë¤ï¤±¤À¡£»ÈÍѤ·¤Æ¤¤¤ë¥·¥¹¥Æ¥à¤¬ \fInoexec\fR ¤Ë
Âбþ¤¹¤ëǽÎϤ¬¤¢¤ë¤«¤É¤¦¤«¡¢¤è¤¯¤ï¤«¤é¤Ê¤¤¾ì¹ç¤Ï¡¢¼è¤ê¤¢¤¨¤º 
\&\fInoexec\fR ¤ò»î¤·¤Æ¡¢¸ú²Ì¤¬¤¢¤ë¤«¤É¤¦¤«³Î¤«¤á¤Æ¤ß¤ì¤Ð¤è¤¤¡£¤½¤ì¤Ê¤é
¤¤¤Ä¤À¤Ã¤Æ¤Ç¤­¤ë¤Ï¤º¤À¡£
.PP
Ãí°Õ¤·¤Æ¤Û¤·¤¤¤¬¡¢¥·¥§¥ë¡¦¥¨¥¹¥±¡¼¥×¤Î¶Ø»ß¤ÏËüǽÌô¤Ç¤Ï¤Ê¤¤¡£¥ë¡¼¥È¤Î¸¢¸Â¤Ç
Æ°¤¤¤Æ¤¤¤ë¥×¥í¥°¥é¥à¤Ë¤Ï¡¢¤Û¤«¤Ë¤â¡¢´í¸±À­¤Î¤¢¤ë¤µ¤Þ¤¶¤Þ¤Êºî¶È (¥Õ¥¡¥¤¥ë¤Î
Ãæ¿È¤òÆþ¤ìÂؤ¨¤ë¤È¤«¡¢¾å½ñ¤­¤¹¤ë¤È¤«) ¤¬²Äǽ¤Ç¤¢¤ê¡¢»×¤¤¤¬¤±¤º¤Ë
¸¢¸Â¤ò³ÈÂ礷¤Æ¤·¤Þ¤¦¤³¤È¤â¤¢¤ê¤¨¤ë¤Î¤À¡£Æä˥¨¥Ç¥£¥¿¤Ë¤Ä¤¤¤Æ¸À¤¦¤È¡¢
¥æ¡¼¥¶¤Ë¤Ï \fBsudoedit\fR ¤ò¼Â¹Ô¤¹¤ëµö²Ä¤òÍ¿¤¨¤ë¤Î¤¬¡¢¤è¤ê°ÂÁ´¤ÊÊýË¡¤Ç¤¢¤ë¡£
.SH "´ØÏ¢¹àÌÜ"
.IX Header "SEE ALSO"
\&\fIrsh\fR\|(1), \fIsu\fR\|(1), \fIfnmatch\fR\|(3), \fIglob\fR\|(3), \fIsudo\fR\|(8), \fIvisudo\fR\|(8)
.SH "·Ù¹ð"
.IX Header "CAVEATS"
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ÎÊÔ½¸¤Ë¤Ï¡¢\fBɬ¤º\fR \fBvisudo\fR ¥³¥Þ¥ó¥É¤ò
»È¤¦¤Ù¤­¤À¡£¤½¤¦¤¹¤ì¤Ð¡¢\fBvisudo\fR ¤¬¥Õ¥¡¥¤¥ë¤ò¥í¥Ã¥¯¤·¡¢Ê¸Ë¡¤Î¥Á¥§¥Ã
¥¯¤ò¤ä¤Ã¤Æ¤¯¤ì¤ë¡£\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤ËʸˡŪ¤Ê´Ö°ã¤¤¤¬¤¢¤ë¤È¡¢
\&\fBsudo\fR ¤¬Æ°¤«¤Ê¤¤¤Î¤Ç¡¢\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ë¤Ïʸˡ¥¨¥é¡¼¤¬Àä
ÂФˤ¢¤Ã¤Æ¤Ï¤Ê¤é¤Ê¤¤¤Î¤À¡£
.PP
¥Í¥Ã¥È¥°¥ë¡¼¥×¤ò (¥æ¡¼¥¶¤Ë¤Ä¤¤¤Æ¤Ç¤Ï¤Ê¤¯) ¥Þ¥·¥ó¤Ë¤Ä¤¤¤Æ»ÈÍѤ·¡¢
\&\fInetgroup\fR ¥Õ¥¡¥¤¥ë¤Ë´°Á´½¤¾þ¥Û¥¹¥È̾¤òµ­ºÜ¤¹¤ë¾ì¹ç¤Ï (¤¿¤¤¤Æ¤¤
¤½¤¦¤¹¤ë¤â¤Î¤À¤¬)¡¢¤½¤Î¥Þ¥·¥ó¤Î¥Û¥¹¥È̾¤ò \f(CW\*(C`hostname\*(C'\fR 
¥³¥Þ¥ó¥É¤¬½ÐÎϤ¹¤ëÄ̤ê¤Î´°Á´½¤¾þ̾¤Ç½ñ¤¯¤«¡¢¤µ¤â¤Ê¤±¤ì¤Ð 
\&\fIsudoers\fR ¥Õ¥¡¥¤¥ë¤Ç \fIfqdn\fR ¥ª¥×¥·¥ç¥ó¤ò»È¤¦¤«¤·¤Ê¤±¤ì¤Ð¤Ê¤é
¤Ê¤¤¡£
.SH "¥Ð¥°"
.IX Header "BUGS"
\&\fBsudo\fR ¤Ë¥Ð¥°¤òȯ¸«¤·¤¿¤È»×¤Ã¤¿¤é¡¢²¼µ­¤Î¥Ú¡¼¥¸¤Ë¥¢¥¯¥»¥¹¤·¤Æ¡¢
¥Ð¥°¥ì¥Ý¡¼¥È¤òÄó½Ð¤·¤Æ¤¤¤¿¤À¤­¤¿¤¤¡£
.br
http://www.sudo.ws/sudo/bugs/
.SH "¥µ¥Ý¡¼¥È"
.IX Header "SUPPORT"
¤¢¤ëÄøÅÙ¤Î̵ÎÁ¥µ¥Ý¡¼¥È¤¬ sudo-users ¥á¡¼¥ê¥ó¥°¥ê¥¹¥È¤òÄ̤·¤ÆÍøÍѤǤ­¤ë¡£
¹ØÆɤ䥢¡¼¥«¥¤¥Ö¤Î¸¡º÷¤Ë¤Ï²¼µ­ URL ¤ò¸æÍ÷¤Ë¤Ê¤ë¤³¤È¡£
.br
http://www.sudo.ws/mailman/listinfo/sudo\-users
.SH "ÌÈÀÕ"
.IX Header "DISCLAIMER"
\&\fBsudo\fR ¤Ï¡Ö¸½¾õ¤Î¤Þ¤Þ¡×Ä󶡤µ¤ì¤ë¡£ÌÀ¼¨Åª¤Ê¡¢¤¢¤ë¤¤¤ÏÌÛ¼¨Åª¤Ê
¤¤¤«¤Ê¤ëÊݾڤ⡢¾¦ÉÊÀ­¤äÆÃÄêÌÜŪ¤Ø¤ÎŬ¹çÀ­¤Ë¤Ä¤¤¤Æ¤ÎÌÛ¼¨Åª¤ÊÊݾڤò´Þ¤á¡¢
¤Þ¤¿¤½¤ì¤Î¤ß¤Ë»ß¤Þ¤é¤º¡¢¤³¤ì¤òÈÝǧ¤¹¤ë¡£¾ÜºÙ¤ÊÁ´Ê¸¤Ë¤Ä¤¤¤Æ¤Ï¡¢
\&\fBsudo\fR ¤È°ì½ï¤ËÇÛÉÛ¤µ¤ì¤Æ¤¤¤ë \s-1LICENSE\s0 ¥Õ¥¡¥¤¥ë¤ä
²¼µ­ Web ¥Ú¡¼¥¸¤ò¸æÍ÷¤¤¤¿¤À¤­¤¿¤¤¡£
.br
http://www.sudo.ws/sudo/license.html