# The sudo binary must be setuid root
sudo: setuid-binary usr/bin/sudo 4755 root/root
# Sudo configuration and data dirs must not be world-readable
sudo: non-standard-file-perm etc/sudoers 0440 != 0644
sudo: non-standard-dir-perm etc/sudoers.d/ 0750 != 0755
sudo: non-standard-dir-perm var/lib/sudo/ 0700 != 0755
# Sudo ships with debugging symbols
sudo: unstripped-binary-or-object
