diff options
Diffstat (limited to 'etc/sudoers.d')
| -rw-r--r-- | etc/sudoers.d/00-hardening | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/sudoers.d/00-hardening b/etc/sudoers.d/00-hardening new file mode 100644 index 0000000..e1b1d08 --- /dev/null +++ b/etc/sudoers.d/00-hardening @@ -0,0 +1,11 @@ +# Force sudo to run in its own pseudo-terminal (prevents TTY hijacking) +Defaults use_pty + +# Reset environment variables on sudo execution +Defaults env_reset + +# Reduce the cached password window to 5 minutes (default is 15) +Defaults timestamp_timeout=5 + +# Clear screen after entering password +Defaults lecture=never |