if [ $1 -ge 2 ]; then
/usr/sbin/control-restore sudo
else
for facility in sudo; do
/usr/sbin/control "$facility" wheelonly
done
fi
if [ $1 -ge 2 ]; then
/usr/sbin/control-restore sudoers
else
for facility in sudoers; do
/usr/sbin/control "$facility" strict
done
fi
if [ ! -f "/var/run/control/sudoreplay" ]; then
if [ "$1" -gt 1 ]; then
if [ $1 -ge 2 ]; then
/usr/sbin/control-dump sudowheel
fi
else
echo wheelonly > "/var/run/control/sudoreplay"
fi
fi
if [ $1 -ge 2 ]; then
/usr/sbin/control-restore sudoreplay
else
for facility in sudoreplay; do
/usr/sbin/control "$facility" wheelonly
done
fi
if [ ! -f "/var/run/control/sudowheel" ]; then
if [ "$1" -gt 1 ]; then
if [ $1 -ge 2 ]; then
/usr/sbin/control-dump sudowheel
fi
else
echo disabled > "/var/run/control/sudowheel"
fi
fi
if [ $1 -ge 2 ]; then
/usr/sbin/control-restore sudowheel
else
for facility in sudowheel; do
/usr/sbin/control "$facility" disabled
done
fi