From 13ca3d9490f9d46dc7b9df4dea7d66c1d6a81def Mon Sep 17 00:00:00 2001 From: Erik Sundell Date: Fri, 26 May 2023 00:13:26 +0200 Subject: [PATCH] Update note about disable_user_sudo to reflect new default value --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b32cbcd..9c27663 100644 --- a/README.md +++ b/README.md @@ -353,7 +353,7 @@ fail. ### `disable_user_sudo` -Setting this to true prevents users from being able to use `sudo` (or any other means) to +Set to true, this prevents users from being able to use `sudo` (or any other means) to become other users (including root). This helps contain damage from a compromise of a user's credentials if they also have sudo rights on the machine - a web based exploit will now only be able to damage the user's own stuff, rather than have complete root access. @@ -362,7 +362,7 @@ be able to damage the user's own stuff, rather than have complete root access. c.SystemdSpawner.disable_user_sudo = True ``` -Defaults to false. +Defaults to True. This requires systemd version > 228. If you enable this in earlier versions, spawning will fail.