From e66e1ca383e22643936f3befb3c2095c4f4d3a32 Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Sat, 11 Dec 2021 09:08:03 -0700 Subject: [PATCH] In SECURITY NOTES, clarify that PATH may be overridden by the policy. Bug #1014 --- docs/sudo.man.in | 9 ++++----- docs/sudo.mdoc.in | 9 ++++----- 2 files changed, 8 insertions(+), 10 deletions(-) diff --git a/docs/sudo.man.in b/docs/sudo.man.in index a2f139a9d..b815f8fae 100644 --- a/docs/sudo.man.in +++ b/docs/sudo.man.in @@ -25,7 +25,7 @@ .nr BA @BAMAN@ .nr LC @LCMAN@ .nr PS @PSMAN@ -.TH "SUDO" "@mansectsu@" "September 17, 2021" "Sudo @PACKAGE_VERSION@" "System Manager's Manual" +.TH "SUDO" "@mansectsu@" "December 11, 2021" "Sudo @PACKAGE_VERSION@" "System Manager's Manual" .nh .if n .ad l .SH "NAME" @@ -1034,11 +1034,10 @@ searching for a command in the user's \fRPATH\fR (if one or both are in the \fRPATH\fR). -Note, however, that the actual +Depending on the security policy, the user's \fRPATH\fR -environment variable is -\fInot\fR -modified and is passed unchanged to the program that +environment variable may be modified, replaced, +or passed unchanged to the program that \fBsudo\fR executes. .PP diff --git a/docs/sudo.mdoc.in b/docs/sudo.mdoc.in index 1cd9fa7d2..5597b735f 100644 --- a/docs/sudo.mdoc.in +++ b/docs/sudo.mdoc.in @@ -24,7 +24,7 @@ .nr BA @BAMAN@ .nr LC @LCMAN@ .nr PS @PSMAN@ -.Dd September 17, 2021 +.Dd December 11, 2021 .Dt SUDO @mansectsu@ .Os Sudo @PACKAGE_VERSION@ .Sh NAME @@ -975,11 +975,10 @@ searching for a command in the user's .Ev PATH (if one or both are in the .Ev PATH ) . -Note, however, that the actual +Depending on the security policy, the user's .Ev PATH -environment variable is -.Em not -modified and is passed unchanged to the program that +environment variable may be modified, replaced, +or passed unchanged to the program that .Nm executes. .Pp