isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Mention the "list" privilege in the description of the -U option.

Browse Source
This commit is contained in:
Todd C. Miller
2022-12-20 09:18:46 -07:00
parent eada918bbb
commit 3040bf54c9
2 changed files with 24 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
docs/sudo.man.in
View File

@@ -555,7 +555,8 @@ Not all security policies support credential caching.
If no If no
\fIcommand\fR \fIcommand\fR
is specified, list the privileges for the invoking user (or the is specified, list the privileges for the invoking user (or the
user specified by the \fIuser\fR
specified by the
\fB\-U\fR \fB\-U\fR
option) on the current host. option) on the current host.
A longer list format is used if this option is specified multiple times A longer list format is used if this option is specified multiple times
@@ -737,11 +738,17 @@ instead of for the invoking user.
The security policy may restrict listing other users' privileges. The security policy may restrict listing other users' privileges.
When using the When using the
\fIsudoers\fR \fIsudoers\fR
policy, only root or a user with the ability to run any policy, the
\fIcommand\fR \fB\-U\fR
as either root or the specified option is restricted to the root user and users with either the
\(lqlist\(rq
priviege for the specified
\fIuser\fR \fIuser\fR
on the current host may use this option. or the ability to run any
\fIcommand\fR
as root or
\fIuser\fR
on the current host.
.TP 12n .TP 12n
\fB\-T\fR \fItimeout\fR, \fB\--command-timeout\fR=\fItimeout\fR \fB\-T\fR \fItimeout\fR, \fB\--command-timeout\fR=\fItimeout\fR
Used to set a timeout for the Used to set a timeout for the

17
docs/sudo.mdoc.in
View File

@@ -529,7 +529,8 @@ Not all security policies support credential caching.
If no If no
.Ar command .Ar command
is specified, list the privileges for the invoking user (or the is specified, list the privileges for the invoking user (or the
user specified by the .Ar user
specified by the
.Fl U .Fl U
option) on the current host. option) on the current host.
A longer list format is used if this option is specified multiple times A longer list format is used if this option is specified multiple times
@@ -688,11 +689,17 @@ instead of for the invoking user.
The security policy may restrict listing other users' privileges. The security policy may restrict listing other users' privileges.
When using the When using the
.Em sudoers .Em sudoers
policy, only root or a user with the ability to run any policy, the
.Ar command .Fl U
as either root or the specified option is restricted to the root user and users with either the
.Dq list
priviege for the specified
.Ar user .Ar user
on the current host may use this option. or the ability to run any
.Ar command
as root or
.Ar user
on the current host.
.It Fl T Ar timeout , Fl -command-timeout Ns = Ns Ar timeout .It Fl T Ar timeout , Fl -command-timeout Ns = Ns Ar timeout
Used to set a timeout for the Used to set a timeout for the
.Ar command . .Ar command .