In the bottom of /etc/sudoers I have Defaults timestamp_timeout=0 Defaults passwd_timeout=1 Defaults tty_tickets Defaults authenticate But I can still logout and back in without retyping my passwd and similarly I can exit the shell and log back in on the same tty and sudo zsh without a passwd. Anyone know why sudo doesn't like me changing these defaults? -l