Document that a leading ':' is skipped when checking TZ for a

fully-qualified path name.

diff --git a/doc/sudoers.cat b/doc/sudoers.cat
index 745e26b883bbf9dc738fce8a046e57ec364c72fe..0351a7e1e197a6e91c3c2df13ef3b5f719368700 100644 (file)
--- a/doc/sudoers.cat
+++ b/doc/sudoers.cat
@@ -1670,9 +1670,9 @@ S\bSU\bUD\bDO\bOE\bER\bRS\bS O\bOP\bPT\bTI\bIO\bON\bNS\bS
                        programs.  The TZ variable is considered unsafe if any
                        of the following are true:
 
-                       +\b+\bo\bo   It consists of a fully-qualified path name that
-                           does not match the location of the _\bz_\bo_\bn_\be_\bi_\bn_\bf_\bo
-                           directory.
+                       +\b+\bo\bo   It consists of a fully-qualified path name
+                           (optionally prefixed with a colon `:') that does
+                           not match the location of the _\bz_\bo_\bn_\be_\bi_\bn_\bf_\bo directory.
 
                        +\b+\bo\bo   It contains a _\b._\b. path element.
 

diff --git a/doc/sudoers.man.in b/doc/sudoers.man.in
index 339883ace044c2bcde1bca937d1d743f4f9aaf0c..b7c358a9a155107aac153420e5c974a789be1ada 100644 (file)
--- a/doc/sudoers.man.in
+++ b/doc/sudoers.man.in
@@ -3435,8 +3435,10 @@ variable is considered unsafe if any of the following are true:
 .PD 0
 .TP 4n
 \fB\(bu\fR
-It consists of a fully-qualified path name that does not match
-the location of the
+It consists of a fully-qualified path name
+(optionally prefixed with a colon
+\(oq:\&\(cq)
+that does not match the location of the
 \fIzoneinfo\fR
 directory.
 .PD

diff --git a/doc/sudoers.mdoc.in b/doc/sudoers.mdoc.in
index f9fda4ec164a7d41cd55c22fee4ab018d688337f..ecea0b988ec701a47b5ec10fcad6759db04f236f 100644 (file)
--- a/doc/sudoers.mdoc.in
+++ b/doc/sudoers.mdoc.in
@@ -3188,8 +3188,10 @@ The
 variable is considered unsafe if any of the following are true:
 .Bl -bullet
 .It
-It consists of a fully-qualified path name that does not match
-the location of the
+It consists of a fully-qualified path name
+(optionally prefixed with a colon
+.Ql :\& )
+that does not match the location of the
 .Pa zoneinfo
 directory.
 .It