Skip to content

Commit

Permalink
Update note about disable_user_sudo to reflect new default value
Browse files Browse the repository at this point in the history
  • Loading branch information
consideRatio committed May 26, 2023
1 parent 51181ca commit 13ca3d9
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -353,7 +353,7 @@ fail.

### `disable_user_sudo`

Setting this to true prevents users from being able to use `sudo` (or any other means) to
Set to true, this prevents users from being able to use `sudo` (or any other means) to
become other users (including root). This helps contain damage from a compromise of a user's
credentials if they also have sudo rights on the machine - a web based exploit will now only
be able to damage the user's own stuff, rather than have complete root access.
Expand All @@ -362,7 +362,7 @@ be able to damage the user's own stuff, rather than have complete root access.
c.SystemdSpawner.disable_user_sudo = True
```

Defaults to false.
Defaults to True.

This requires systemd version > 228. If you enable this in earlier versions, spawning will
fail.
Expand Down

0 comments on commit 13ca3d9

Please sign in to comment.