Document that the values printed by "sudo -V" are affected by

Defaults settings in sudoers.
This commit is contained in:
Todd C. Miller
2015-07-13 12:58:25 -06:00
parent 374146f70f
commit 5125f82c4e
3 changed files with 23 additions and 19 deletions

View File

@@ -924,12 +924,12 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
Any variables in the caller's environment that match Any variables in the caller's environment that match
the env_keep and env_check lists are then added, the env_keep and env_check lists are then added,
followed by any variables present in the file specified followed by any variables present in the file specified
by the _e_n_v___f_i_l_e option (if any). The default contents by the _e_n_v___f_i_l_e option (if any). The contents of the
of the env_keep and env_check lists are displayed when env_keep and env_check lists, as modified by global
ssuuddoo is run by root with the --VV option. If the Defaults parameters in _s_u_d_o_e_r_s, are displayed when ssuuddoo
_s_e_c_u_r_e___p_a_t_h option is set, its value will be used for is run by root with the --VV option. If the _s_e_c_u_r_e___p_a_t_h
the PATH environment variable. This flag is _o_n by option is set, its value will be used for the PATH
default. environment variable. This flag is _o_n by default.
fast_glob Normally, ssuuddoo uses the glob(3) function to do shell- fast_glob Normally, ssuuddoo uses the glob(3) function to do shell-
style globbing when matching path names. However, style globbing when matching path names. However,
@@ -1708,7 +1708,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
Regardless of whether the env_reset option is enabled Regardless of whether the env_reset option is enabled
or disabled, variables specified by env_check will be or disabled, variables specified by env_check will be
preserved in the environment if they pass the preserved in the environment if they pass the
aforementioned check. The default list of environment aforementioned check. The global list of environment
variables to check is displayed when ssuuddoo is run by variables to check is displayed when ssuuddoo is run by
root with the --VV option. root with the --VV option.
@@ -1718,7 +1718,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
list or a single value without double-quotes. The list list or a single value without double-quotes. The list
can be replaced, added to, deleted from, or disabled by can be replaced, added to, deleted from, or disabled by
using the =, +=, -=, and ! operators respectively. The using the =, +=, -=, and ! operators respectively. The
default list of environment variables to remove is global list of environment variables to remove is
displayed when ssuuddoo is run by root with the --VV option. displayed when ssuuddoo is run by root with the --VV option.
Note that many operating systems will remove Note that many operating systems will remove
potentially dangerous variables from the environment of potentially dangerous variables from the environment of
@@ -1731,7 +1731,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
be a double-quoted, space-separated list or a single be a double-quoted, space-separated list or a single
value without double-quotes. The list can be replaced, value without double-quotes. The list can be replaced,
added to, deleted from, or disabled by using the =, +=, added to, deleted from, or disabled by using the =, +=,
-=, and ! operators respectively. The default list of -=, and ! operators respectively. The global list of
variables to keep is displayed when ssuuddoo is run by root variables to keep is displayed when ssuuddoo is run by root
with the --VV option. with the --VV option.

View File

@@ -2001,11 +2001,13 @@ lists are then added, followed by any variables present in the file
specified by the specified by the
\fIenv_file\fR \fIenv_file\fR
option (if any). option (if any).
The default contents of the The contents of the
\fRenv_keep\fR \fRenv_keep\fR
and and
\fRenv_check\fR \fRenv_check\fR
lists are displayed when lists, as modified by global Defaults parameters in
\fIsudoers\fR,
are displayed when
\fBsudo\fR \fBsudo\fR
is run by root with the is run by root with the
\fB\-V\fR \fB\-V\fR
@@ -3524,7 +3526,7 @@ Regardless of whether the
option is enabled or disabled, variables specified by option is enabled or disabled, variables specified by
\fRenv_check\fR \fRenv_check\fR
will be preserved in the environment if they pass the aforementioned check. will be preserved in the environment if they pass the aforementioned check.
The default list of environment variables to check is displayed when The global list of environment variables to check is displayed when
\fBsudo\fR \fBsudo\fR
is run by root with is run by root with
the the
@@ -3545,7 +3547,7 @@ The list can be replaced, added to, deleted from, or disabled by using the
and and
\fR\&!\fR \fR\&!\fR
operators respectively. operators respectively.
The default list of environment variables to remove is displayed when The global list of environment variables to remove is displayed when
\fBsudo\fR \fBsudo\fR
is run by root with the is run by root with the
\fB\-V\fR \fB\-V\fR
@@ -3570,7 +3572,7 @@ The list can be replaced, added to, deleted from, or disabled by using the
and and
\fR\&!\fR \fR\&!\fR
operators respectively. operators respectively.
The default list of variables to keep The global list of variables to keep
is displayed when is displayed when
\fBsudo\fR \fBsudo\fR
is run by root with the is run by root with the

View File

@@ -1866,11 +1866,13 @@ lists are then added, followed by any variables present in the file
specified by the specified by the
.Em env_file .Em env_file
option (if any). option (if any).
The default contents of the The contents of the
.Li env_keep .Li env_keep
and and
.Li env_check .Li env_check
lists are displayed when lists, as modified by global Defaults parameters in
.Em sudoers ,
are displayed when
.Nm sudo .Nm sudo
is run by root with the is run by root with the
.Fl V .Fl V
@@ -3272,7 +3274,7 @@ Regardless of whether the
option is enabled or disabled, variables specified by option is enabled or disabled, variables specified by
.Li env_check .Li env_check
will be preserved in the environment if they pass the aforementioned check. will be preserved in the environment if they pass the aforementioned check.
The default list of environment variables to check is displayed when The global list of environment variables to check is displayed when
.Nm sudo .Nm sudo
is run by root with is run by root with
the the
@@ -3291,7 +3293,7 @@ The list can be replaced, added to, deleted from, or disabled by using the
and and
.Li \&! .Li \&!
operators respectively. operators respectively.
The default list of environment variables to remove is displayed when The global list of environment variables to remove is displayed when
.Nm sudo .Nm sudo
is run by root with the is run by root with the
.Fl V .Fl V
@@ -3315,7 +3317,7 @@ The list can be replaced, added to, deleted from, or disabled by using the
and and
.Li \&! .Li \&!
operators respectively. operators respectively.
The default list of variables to keep The global list of variables to keep
is displayed when is displayed when
.Nm sudo .Nm sudo
is run by root with the is run by root with the