[DEFAULT]
rules=one_root, env_reset
lens=Sudoers
pattern=.*/sudoers
[one_root]
name=One entry for root
explanation=Root has only one entry in sudoers
type=count
expr=$file/spec/user[. = "root"]
value=1
[env_reset]
name=env_reset set
explanation=The env_reset parameter must be set in Defaults
type=count
expr=$file/Defaults/env_reset
value=1