diff --git a/docs/sudoers.man.in b/docs/sudoers.man.in index 60e6c774a..1a7c1555a 100644 --- a/docs/sudoers.man.in +++ b/docs/sudoers.man.in @@ -2023,6 +2023,11 @@ and logged just like they would be if run through directly. This is useful in conjunction with commands that allow shell escapes such as editors, shells, and paginators. +There is additional overhead due to the policy check that may add +latency when running commands such as shell scripts that execute a +large number of sub-commands. +For interactive commands, such as a shell or editor, +the overhead is not usually noticable. .sp In the following example, user \fBchuck\fR @@ -3428,10 +3433,6 @@ policy check. The checks can only be performed if the proc(@mansectform@) file system is available. -The additional overhead from -\fIintercept_verify\fR -may add additional latency when running shell scripts that -execute a large number of commands. This flag has no effect unless the \fIintercept\fR flag is enabled or the diff --git a/docs/sudoers.mdoc.in b/docs/sudoers.mdoc.in index 5fc48cc10..6ab4f49bb 100644 --- a/docs/sudoers.mdoc.in +++ b/docs/sudoers.mdoc.in @@ -1926,6 +1926,11 @@ and logged just like they would be if run through directly. This is useful in conjunction with commands that allow shell escapes such as editors, shells, and paginators. +There is additional overhead due to the policy check that may add +latency when running commands such as shell scripts that execute a +large number of sub-commands. +For interactive commands, such as a shell or editor, +the overhead is not usually noticeable. .Pp In the following example, user .Sy chuck @@ -3249,10 +3254,6 @@ policy check. The checks can only be performed if the .Xr proc @mansectform@ file system is available. -The additional overhead from -.Em intercept_verify -may add additional latency when running shell scripts that -execute a large number of commands. This flag has no effect unless the .Em intercept flag is enabled or the