Can a sudoers #include instruction be disabled with an additional # character? Or rather just delete the leading # character?
(I wish I would understand what the sudo developers had on their mind when they created an instruction that requires a leading comment character.)
#EXTVLCOPT
. I doubt this is the case forsudoers
though, this file must be strict. Probably someone mindlessly mimicked#include
from C preprocessor, where it's OK because#
is not a comment. Insudoers
comments start with#
and#include
is bad design really.sudoers
file I thoughtinclude
is a directive and#include
is a commented directive. The rule of least surprise violated hard. Also see this answer.