Set disable_coredump true Set group_source adaptive Set max_groups -1 Set probe_interfaces true Plugin sudoers_policy sudoers.so sudoers_file=/etc/sudoers sudoers_mode=0400 sudoers_gid=0 sudoers_uid=0 Plugin sudoers_io sudoers.so