I am trying to create a default sudo environment that is applied to all users in addition to anything from other groups. This would include things like "secure_path" and a few env lines. However I cannot seem to get this to work. I understand that the highest number in "Sudo order" is processed first but regardless of ordering I cannot seem to apply a default along with other sudo groups. I would expect that if this default was numbered "1" and everything else was higher that it would apply the Sudo options what I'm seeing in practice is that the options aren't additive and if a higher numbered rule doesn't contain them that they are removed. Is this the expected behavior here?

For example if I have:

env_keep="COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS"

In a sudo group called "Default" and that group is set for all users on all hosts with Commands and As whom all set to "Specified" with Sudo order of 1, then a group called "IT" with set for all users, all hosts, all commands, any user, any group with a Sudo order of 2 it appears that the Sudo options aren't applied and only what's set for "IT". 

If there is no inheritance I can work with that but I would be brilliant if I I have simply missed something simple and can configure a default set of options.
--

Mark Potter

Senior Linux Administrator