isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document how commands are passed to the shell for the -i and -s options.

Browse Source 
The concatenation of command and arguments and escaping of special
characters was not documented.
Text adapted from GitHub issue #121 from Kris Rinzwind
This commit is contained in:
Todd C. Miller
2022-01-20 14:05:00 -07:00
parent 805e1b9470
commit 5f45fd907b
2 changed files with 36 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
docs/sudo.man.in
View File

@@ -449,10 +449,17 @@ This means that login-specific resource files such as
or or
\fI.login\fR \fI.login\fR
will be read by the shell. will be read by the shell.
If a command is specified, it is passed to the shell for execution If a command is specified, it is passed to the shell as a simple
via the shell's command using the
\fB\-c\fR \fB\-c\fR
option. option.
The command and any arguments are concatenated, separated by spaces,
after escaping each character
(including white space)
with a backslash
(\(oq\e\(cq)
except for alphanumerics, underscores,
hyphens, and dollar signs.
If no command is specified, an interactive shell is executed. If no command is specified, an interactive shell is executed.
\fBsudo\fR \fBsudo\fR
attempts to change to that user's home directory before running the attempts to change to that user's home directory before running the
@@ -624,10 +631,17 @@ Run the shell specified by the
\fRSHELL\fR \fRSHELL\fR
environment variable if it is set or the shell specified by the environment variable if it is set or the shell specified by the
invoking user's password database entry. invoking user's password database entry.
If a command is specified, it is passed to the shell for execution If a command is specified, it is passed to the shell as a simple
via the shell's command using the
\fB\-c\fR \fB\-c\fR
option. option.
The command and any arguments are concatenated, separated by spaces,
after escaping each character
(including white space)
with a backslash
(\(oq\e\(cq)
except for alphanumerics, underscores,
hyphens, and dollar signs.
If no command is specified, an interactive shell is executed. If no command is specified, an interactive shell is executed.
Note that most shells behave differently when a command is specified Note that most shells behave differently when a command is specified
as compared to an interactive session; consult the shell's manual as compared to an interactive session; consult the shell's manual

22
docs/sudo.mdoc.in
View File

@@ -426,10 +426,17 @@ This means that login-specific resource files such as
or or
.Pa .login .Pa .login
will be read by the shell. will be read by the shell.
If a command is specified, it is passed to the shell for execution If a command is specified, it is passed to the shell as a simple
via the shell's command using the
.Fl c .Fl c
option. option.
The command and any arguments are concatenated, separated by spaces,
after escaping each character
.Pq including white space
with a backslash
.Pq Ql \e
except for alphanumerics, underscores,
hyphens, and dollar signs.
If no command is specified, an interactive shell is executed. If no command is specified, an interactive shell is executed.
.Nm .Nm
attempts to change to that user's home directory before running the attempts to change to that user's home directory before running the
@@ -582,10 +589,17 @@ Run the shell specified by the
.Ev SHELL .Ev SHELL
environment variable if it is set or the shell specified by the environment variable if it is set or the shell specified by the
invoking user's password database entry. invoking user's password database entry.
If a command is specified, it is passed to the shell for execution If a command is specified, it is passed to the shell as a simple
via the shell's command using the
.Fl c .Fl c
option. option.
The command and any arguments are concatenated, separated by spaces,
after escaping each character
.Pq including white space
with a backslash
.Pq Ql \e
except for alphanumerics, underscores,
hyphens, and dollar signs.
If no command is specified, an interactive shell is executed. If no command is specified, an interactive shell is executed.
Note that most shells behave differently when a command is specified Note that most shells behave differently when a command is specified
as compared to an interactive session; consult the shell's manual as compared to an interactive session; consult the shell's manual