bodycommoncontrol{bundlesequence=>{"sudoers"};inputs=>{"libraries/cfengine_stdlib.cf"};}bundleagentsudoers{# Define the master location of the sudoers filevars:"master_location"string=>"/var/cfengine/masterfiles";# Copy the master sudoers file to /etc/sudoersfiles:"/tmp/sudoers"# change to /etc/sudoers to use in productioncomment=>"Make sure the sudo configuration is secure and up to date",perms=>mog("440","root","root"),copy_from=>secure_cp("$(master_location)/sudoers","$(sys.policy_hub)");}

# /etc/sudoers## This file MUST be edited with the 'visudo' command as root.#Defaults        env_reset# User privilege specificationroot    ALL=(ALL) ALL# Allow members of group sudo to execute any command after they have# provided their password%sudo ALL=(ALL) ALL# Members of the admin group may gain root privileges%admin ALL=(ALL) ALLjohn  ALL=(ALL)       ALL