Defaults:root,iank !log_allowed, !pam_session
# for just the root user, set some env vars
Defaults>root env_file=/etc/rootsudoenv
+
+# a few commands we should be able to run with no password
+iank ALL = (root) NOPASSWD: /usr/local/bin/spend,/usr/bin/nmtui-connect
+
EOF
case $HOSTNAME in