By default, the env_reset option is enabled.  This causes commands to be
     executed with a new, minimal environment.  On AIX (and Linux systems
     without PAM), the environment is initialized with the contents of the
     /etc/environment file.  The new environment contains the TERM, PATH,
     HOME, MAIL, SHELL, LOGNAME, USER, USERNAME and SUDO_* variables in addi-
     tion to variables from the invoking process permitted by the env_check
     and env_keep options.  This is effectively a whitelist for environment

     As a special case, if sudo's -i option (initial login) is specified,
     sudoers will initialize the environment regardless of the value of
     env_reset.  The DISPLAY, PATH and TERM variables remain unchanged; HOME,
     MAIL, SHELL, USER, and LOGNAME are set based on the target user.  On AIX
     (and Linux systems without PAM), the contents of /etc/environment are
     also included.  All other environment variables are removed.

     env_reset         If set, sudo will run the command in a minimal environ-
                       ment containing the TERM, PATH, HOME, MAIL, SHELL,
                       LOGNAME, USER, USERNAME and SUDO_* variables.  Any
                       variables in the caller's environment that match the
                       env_keep and env_check lists are then added, followed
                       by any variables present in the file specified by the
                       env_file option (if any).  The default contents of the

     SETENV and NOSETENV

       These tags override the value of the setenv option on a per-command
       basis.  Note that if SETENV has been set for a command, the user may
       disable the env_reset option from the command line via the -E option.
       Additionally, environment variables set on the command line are not
       subject to the restrictions imposed by env_check, env_delete, or
       env_keep.  As such, only trusted users should be allowed to set vari-
       ables in this manner.  If the command matched is ALL, the SETENV tag is