[Discuss] ssh keys question

[kentborg at borg.org (Kent Borg)]

On 06/17/2016 02:41 PM, Matthew Gillen wrote:
> man sudo:
>> Security policies may support credential caching to allow the user to 
>> run sudo again for a period of time without requiring 
>> authentication.  The
>>      sudoers policy caches credentials for 5 minutes, unless 
>> overridden in sudoers(5).  By running sudo with the -v option, a user 
>> can update the
>>      cached credentials without running a command.

Cool...but:

>      passwd_timeout    Number of minutes before the sudo password 
> prompt times out, or 0 for no timeout. The timeout may include a 
> fractional
>                        component if minute granularity is 
> insufficient, for example 2.5.  The default is 0.

I want 0 to mean timeout immediately, not timeout never! If people want 
never let them put 999999 in there and let their heirs deal with the  
eventual timeout.

Guess I could try 0.0000001

-kb