PS: On Mon, 2026-08-03 at 13:40 +0200, Ralf Mardorf wrote: > FWIW I just shortened this to 1 minute. > > $ sudo EDITOR=xed visudo > > [snip] > > ## > ## Defaults specification > ## > > Defaults timestamp_timeout=1 > > [snip]
This did not shorten the timeout to 1 minute. To my understanding it is not overwritten either in the same file or by a file in /etc/sudoers.d. After the "Defaults" just "root ALL=[snip]", "%wheel ALL=[snip]" and "@includedir /etc/sudoers.d" follow. /etc/sudoers.d is an empty directory. I changed it to Defaults env_reset,timestamp_timeout=1 This works, but it's not recommended to use it [1], hence I changed it to Defaults timestamp_timeout=1 Defaults env_keep += timestamp_timeout but this doesn't work. Wrong order or something else wrong? I didn't test, but I made Defaults timestamp_timeout=1 the last line of the sudoers file. Now it does work. [1] https://unixhealthcheck.com/blog?id=363
