Try to clarify that sudoedit in sudoers should not include a

leading pathname.
This commit is contained in:
Todd C. Miller
2013-03-05 15:06:00 -05:00
parent 593832152f
commit 8397297de5
3 changed files with 23 additions and 7 deletions

View File

@@ -329,9 +329,11 @@ SSUUDDOOEERRSS FFIILLEE FFOORRMMAATT
the Cmnd must match exactly those given by the user on the command line the Cmnd must match exactly those given by the user on the command line
(or match the wildcards if there are any). Note that the following (or match the wildcards if there are any). Note that the following
characters must be escaped with a `\' if they are used in command characters must be escaped with a `\' if they are used in command
arguments: `,', `:', `=', `\'. The special command ``sudoedit'' is used arguments: `,', `:', `=', `\'. The built-in command ``sudoedit'' is used
to permit a user to run ssuuddoo with the --ee option (or as ssuuddooeeddiitt). It may to permit a user to run ssuuddoo with the --ee option (or as ssuuddooeeddiitt). It may
take command line arguments just as a normal command does. take command line arguments just as a normal command does. Note that
``sudoedit'' is a command built-in to ssuuddoo itself and must be specified
in _s_u_d_o_e_r_s without a leading path.
DDeeffaauullttss DDeeffaauullttss
Certain configuration options may be changed from their default values at Certain configuration options may be changed from their default values at
@@ -2150,4 +2152,4 @@ DDIISSCCLLAAIIMMEERR
file distributed with ssuuddoo or http://www.sudo.ws/sudo/license.html for file distributed with ssuuddoo or http://www.sudo.ws/sudo/license.html for
complete details. complete details.
Sudo 1.8.7 February 24, 2013 Sudo 1.8.7 Sudo 1.8.7 March 5, 2013 Sudo 1.8.7

View File

@@ -21,7 +21,7 @@
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force .\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512. .\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\" .\"
.TH "SUDOERS" "@mansectsu@" "February 24, 2013" "Sudo @PACKAGE_VERSION@" "Programmer's Manual" .TH "SUDOERS" "@mansectsu@" "March 5, 2013" "Sudo @PACKAGE_VERSION@" "Programmer's Manual"
.nh .nh
.if n .ad l .if n .ad l
.SH "NAME" .SH "NAME"
@@ -730,7 +730,7 @@ if they are used in command arguments:
`:\&', `:\&',
`=\&', `=\&',
`\e'. `\e'.
The special command The built-in command
``\fRsudoedit\fR'' ``\fRsudoedit\fR''
is used to permit a user to run is used to permit a user to run
\fBsudo\fR \fBsudo\fR
@@ -739,6 +739,13 @@ with the
option (or as option (or as
\fBsudoedit\fR). \fBsudoedit\fR).
It may take command line arguments just as a normal command does. It may take command line arguments just as a normal command does.
Note that
``\fRsudoedit\fR''
is a command built-in to
\fBsudo\fR
itself and must be specified in
\fIsudoers\fR
without a leading path.
.SS "Defaults" .SS "Defaults"
Certain configuration options may be changed from their default Certain configuration options may be changed from their default
values at run-time via one or more values at run-time via one or more

View File

@@ -19,7 +19,7 @@
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force .\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512. .\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\" .\"
.Dd February 24, 2013 .Dd March 5, 2013
.Dt SUDOERS @mansectform@ .Dt SUDOERS @mansectform@
.Os Sudo @PACKAGE_VERSION@ .Os Sudo @PACKAGE_VERSION@
.Sh NAME .Sh NAME
@@ -698,7 +698,7 @@ if they are used in command arguments:
.Ql :\& , .Ql :\& ,
.Ql =\& , .Ql =\& ,
.Ql \e . .Ql \e .
The special command The built-in command
.Dq Li sudoedit .Dq Li sudoedit
is used to permit a user to run is used to permit a user to run
.Nm sudo .Nm sudo
@@ -707,6 +707,13 @@ with the
option (or as option (or as
.Nm sudoedit ) . .Nm sudoedit ) .
It may take command line arguments just as a normal command does. It may take command line arguments just as a normal command does.
Note that
.Dq Li sudoedit
is a command built-in to
.Nm sudo
itself and must be specified in
.Em sudoers
without a leading path.
.Ss Defaults .Ss Defaults
Certain configuration options may be changed from their default Certain configuration options may be changed from their default
values at run-time via one or more values at run-time via one or more