isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document sudoedit_checkdir

Browse Source
This commit is contained in:
Todd C. Miller
2016-01-20 10:56:47 -07:00
parent 5e300f1e4c
commit 42671f6b95
3 changed files with 66 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
doc/sudo_plugin.cat
View File

@@ -611,6 +611,19 @@ DDEESSCCRRIIPPTTIIOONN
substitution and transparently enable _s_u_d_o_e_d_i_t when the
user attempts to run an editor.
sudoedit_checkdir=bool
Set to false to disable directory writability checks in
ssuuddooeeddiitt. By default, ssuuddooeeddiitt 1.8.16 and higher will
check all directory components of the path to be edited
for writability by the invoking user. Symbolic links
will not be followed in writable directories and
ssuuddooeeddiitt will refuse to edit a file located in a
writable directory. These restrictions are not
enforced when ssuuddooeeddiitt is run by root. The
_s_u_d_o_e_d_i_t___f_o_l_l_o_w option can be set to false to disable
this check. Only available starting with API version
1.8.
sudoedit_follow=bool
Set to true to allow ssuuddooeeddiitt to edit files that are
symbolic links. By default, ssuuddooeeddiitt 1.8.15 and higher
@@ -1502,7 +1515,9 @@ PPLLUUGGIINN AAPPII CCHHAANNGGEELLOOGG
Debug lines in the sudo.conf(4) file.
Version 1.8 (sudo 1.8.15)
The _s_u_d_o_e_d_i_t___f_o_l_l_o_w entry was added to the command_info list.
The _s_u_d_o_e_d_i_t___c_h_e_c_k_d_i_r and _s_u_d_o_e_d_i_t___f_o_l_l_o_w entries were added to the
command_info list. The default value of _s_u_d_o_e_d_i_t___c_h_e_c_k_d_i_r was
changed to true in sudo 1.8.16.
The sudo _c_o_n_v_e_r_s_a_t_i_o_n function now takes a pointer to a struct
sudo_conv_callback as its fourth argument. The sudo_conv_t
@@ -1542,4 +1557,4 @@ DDIISSCCLLAAIIMMEERR
file distributed with ssuuddoo or https://www.sudo.ws/license.html for
complete details.
Sudo 1.8.16 January 4, 2016 Sudo 1.8.16
Sudo 1.8.16 January 20, 2016 Sudo 1.8.16

27
doc/sudo_plugin.man.in
View File

@@ -16,7 +16,7 @@
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
.TH "SUDO_PLUGIN" "5" "January 4, 2016" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.TH "SUDO_PLUGIN" "5" "January 20, 2016" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.nh
.if n .ad l
.SH "NAME"
@@ -1010,6 +1010,24 @@ enable
\fIsudoedit\fR
when the user attempts to run an editor.
.TP 6n
sudoedit_checkdir=bool
Set to false to disable directory writability checks in
\fBsudoedit\fR.
By default,
\fBsudoedit\fR
1.8.16 and higher will check all directory components of the path to be
edited for writability by the invoking user.
Symbolic links will not be followed in writable directories and
\fBsudoedit\fR
will refuse to edit a file located in a writable directory.
These restrictions are not enforced when
\fBsudoedit\fR
is run by root.
The
\fIsudoedit_follow\fR
option can be set to false to disable this check.
Only available starting with API version 1.8.
.TP 6n
sudoedit_follow=bool
Set to true to allow
\fBsudoedit\fR
@@ -2699,10 +2717,15 @@ sudo.conf(@mansectform@) file.
.TP 6n
Version 1.8 (sudo 1.8.15)
The
\fIsudoedit_checkdir\fR
and
\fIsudoedit_follow\fR
entry was added to the
entries were added to the
\fRcommand_info\fR
list.
The default value of
\fIsudoedit_checkdir\fR
was changed to true in sudo 1.8.16.
.sp
The sudo
\fIconversation\fR

26
doc/sudo_plugin.mdoc.in
View File

@@ -14,7 +14,7 @@
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
.Dd January 4, 2016
.Dd January 20, 2016
.Dt SUDO_PLUGIN @mansectform@
.Os Sudo @PACKAGE_VERSION@
.Sh NAME
@@ -891,6 +891,23 @@ This allows the plugin to perform command substitution and transparently
enable
.Em sudoedit
when the user attempts to run an editor.
.It sudoedit_checkdir=bool
Set to false to disable directory writability checks in
.Nm sudoedit .
By default,
.Nm sudoedit
1.8.16 and higher will check all directory components of the path to be
edited for writability by the invoking user.
Symbolic links will not be followed in writable directories and
.Nm sudoedit
will refuse to edit a file located in a writable directory.
These restrictions are not enforced when
.Nm sudoedit
is run by root.
The
.Em sudoedit_follow
option can be set to false to disable this check.
Only available starting with API version 1.8.
.It sudoedit_follow=bool
Set to true to allow
.Nm sudoedit
@@ -2362,10 +2379,15 @@ times if there are multiple plugin-specific Debug lines in the
.Xr sudo.conf @mansectform@ file.
.It Version 1.8 (sudo 1.8.15)
The
.Em sudoedit_checkdir
and
.Em sudoedit_follow
entry was added to the
entries were added to the
.Li command_info
list.
The default value of
.Em sudoedit_checkdir
was changed to true in sudo 1.8.16.
.Pp
The sudo
.Em conversation