dzdo.env_delete

This configuration parameter specifies the default list of environment variables to be removed from the user’s environment. This configuration parameter only applies if you have selected the Remove unsafe environment variables option for the command in the Access Manager. The variables specified with this parameter are removed in addition to the default list of variables displayed when you run the dzdo -V command as root.

The parameter value can be a comma-separated list of environment variable names.

For example:

dzdo.env_delete: IFS,CDPATH,LOCALDOMAIN,RES_OPTIONS,HOSTALIASES, \ NLSPATH,PATH_LOCALE,LD_*,_RLD*,TERMINFO,TERMINFO_DIRS, \ TERMPATH,TERMCAP,ENV,BASH_ENV,PS4,GLOBIGNORE,SHELLOPTS,\ JAVA_TOOL_OPTIONS,PERLIO_DEBUG,PERLLIB,PERL5LIB, \                  PERL5OPT,PERL5DB,FPATH,NULLCMD,READNULLCMD,ZDOTDIR,TMPPREFIX, \ PYTHONHOME,PYTHONPATH,PYTHONINSPECT,RUBYLIB,RUBYOPT,KRB5_CONFIG, \ KRB5_KTNAME,VAR_ACE,USR_ACE,DLC_ACE,SHLIB_PATH,LDR_*, \
LIBPATH,DYLD_*

This configuration parameter provides functionality equivalent to the env_delete flag for configuring the sudoers file and sudo operation.

You can also set this parameter using group policy.