Mention the "list" privilege in the description of the -U option.

This commit is contained in:
Todd C. Miller
2022-12-20 09:18:46 -07:00
parent eada918bbb
commit 3040bf54c9
2 changed files with 24 additions and 10 deletions

View File

@@ -555,7 +555,8 @@ Not all security policies support credential caching.
If no
\fIcommand\fR
is specified, list the privileges for the invoking user (or the
user specified by the
\fIuser\fR
specified by the
\fB\-U\fR
option) on the current host.
A longer list format is used if this option is specified multiple times
@@ -737,11 +738,17 @@ instead of for the invoking user.
The security policy may restrict listing other users' privileges.
When using the
\fIsudoers\fR
policy, only root or a user with the ability to run any
\fIcommand\fR
as either root or the specified
policy, the
\fB\-U\fR
option is restricted to the root user and users with either the
\(lqlist\(rq
priviege for the specified
\fIuser\fR
on the current host may use this option.
or the ability to run any
\fIcommand\fR
as root or
\fIuser\fR
on the current host.
.TP 12n
\fB\-T\fR \fItimeout\fR, \fB\--command-timeout\fR=\fItimeout\fR
Used to set a timeout for the

View File

@@ -529,7 +529,8 @@ Not all security policies support credential caching.
If no
.Ar command
is specified, list the privileges for the invoking user (or the
user specified by the
.Ar user
specified by the
.Fl U
option) on the current host.
A longer list format is used if this option is specified multiple times
@@ -688,11 +689,17 @@ instead of for the invoking user.
The security policy may restrict listing other users' privileges.
When using the
.Em sudoers
policy, only root or a user with the ability to run any
.Ar command
as either root or the specified
policy, the
.Fl U
option is restricted to the root user and users with either the
.Dq list
priviege for the specified
.Ar user
on the current host may use this option.
or the ability to run any
.Ar command
as root or
.Ar user
on the current host.
.It Fl T Ar timeout , Fl -command-timeout Ns = Ns Ar timeout
Used to set a timeout for the
.Ar command .