From 0d2e2e9f3ce6bcc0ecd37e75b2177c00390dd98f Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Tue, 6 Apr 1999 18:12:08 +0000 Subject: [PATCH] modernize paths and update su example based on sample.sudoers one --- sudoers.pod | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/sudoers.pod b/sudoers.pod index 5d7b8b81c..07261af01 100644 --- a/sudoers.pod +++ b/sudoers.pod @@ -129,7 +129,7 @@ The reserved alias I can be used for both {Host,User,Cmnd}_Alias. B define an alias of I, it will B be used. Note that I implies the entire universe of hosts/users/commands. You can subtract elements from the universe by using the syntax: - user host=ALL,!ALIAS1,!/etc/halt... + user host=ALL,!ALIAS1,!/sbin/halt... Note that the "!" notation only works in a user's command list. You may not use it to subtract elements in a User_Alias, Host_Alias, Cmnd_Alias or user list. @@ -159,11 +159,11 @@ with a "\" if used in command arguments: ",", ":", "=", "\". Runas_Alias OP=root,operator # Command alias specification - Cmnd_Alias LPCS=/usr/etc/lpc,/usr/ucb/lprm + Cmnd_Alias LPCS=/usr/sbin/lpc,/usr/bin/lprm Cmnd_Alias SHELLS=/bin/sh,/bin/csh,/bin/tcsh,/bin/ksh - Cmnd_Alias SU=/bin/su + Cmnd_Alias SU=/usr/bin/su Cmnd_Alias MISC=/bin/rm,/bin/cat:\ - SHUTDOWN=/etc/halt,/etc/shutdown + SHUTDOWN=/sbin/halt,/sbin/shutdown # User specification FULLTIME ALL=(ALL) NOPASSWD: ALL @@ -171,12 +171,12 @@ with a "\" if used in command arguments: ",", ":", "=", "\". PARTTIME ALL=ALL,!SHELLS,!SU +interns +openlabs=ALL,!SHELLS,!SU britt REMOTE=SHUTDOWN:ALL=LPCS - jimbo CUNETS=/bin/su ?*,!/bin/su *root* - nieusma SERVERS=SHUTDOWN,/etc/reboot:\ + jimbo CUNETS=/usr/bin/su [!-]*,!/usr/bin/su *root* + nieusma SERVERS=SHUTDOWN,/sbin/reboot:\ HUB=ALL,!SHELLS - jill houdini=/etc/shutdown -[hr] now,MISC - markm HUB=ALL,!MISC,!/etc/shutdown,!/etc/halt - davehieb merlin=(OP) ALL:SERVERS=/etc/halt:\ + jill houdini=/sbin/shutdown -[hr] now,MISC + markm HUB=ALL,!MISC,!/sbin/shutdown,!/sbin/halt + davehieb merlin=(OP) ALL:SERVERS=/sbin/halt:\ kodiakthorn=NOPASSWD: ALL steve CSNETS=(operator) /usr/op_commands/ @@ -244,27 +244,27 @@ B network). =item nieusma The user C may run commands in the C alias -as well as F on the C machines and +as well as F on the C machines and any command except those in the C alias on the C machines. =item jill -The user C may run C or -C as well as the commands in the +The user C may run C or +C as well as the commands in the C alias on houdini. =item markm The user C may run any command on the C machines -except F, F, and commands listed +except F, F, and commands listed in the C alias. =item davehieb The user C may run any command on C as any user in the Runas_Alias OP (ie: root or operator). He may -also run F on the C and any command +also run F on the C and any command on C (no password required on C). =item steve