The man page for sudoers(5) on Linux, says:

     sudoers — default sudo security policy plugin

What other "security plugins" are available for Linux systems?

  • Just as a vague pointer comment, sssd can obtain sudo rules from LDAP, though I don't know if anybody uses it for that. (And I have no idea where exactly that plugs in.) – Ulrich Schwarz Apr 24 '18 at 16:29
  • @UlrichSchwarz that is actually how the sudoers policy you set in FreeIPA works. – Bratchley Apr 24 '18 at 16:35
  • @l00p sudoers policy can come from a variety of sources, like LDAP or (as Ulrich pointed out) sssd as well. The ldap backend has been around for a while but the sssd one is relatively new-ish (basically implemented as the client portion of the FreeIPA architecture). – Bratchley Apr 24 '18 at 16:37
  • 1
    @Bratchley you all ought to write answers. If you want to collaborate one one, use the community wiki feature. – derobert Apr 24 '18 at 16:58
  • @UlrichSchwarz see above comment, you ought to write that as an answer (or collaborate on one) – derobert Apr 24 '18 at 16:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.