---
sudo:
  config:
    defaults:
      - 'env_reset'
      - 'mail_badpass'
      - 'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"'
      - 'env_keep += "EDITOR"'
      - 'always_set_home'
    acls:
      root:
        group: False
        host: ALL
        who: ALL:ALL
        command: ALL
      admin:
        group: True
        host: ALL
        who: ALL
        command: ALL
      sudo:
        group: True
        host: ALL
        who: ALL:ALL
        command: ALL