Mention -p and -M options in the description of -m.

diff --git a/doc/cvtsudoers.cat b/doc/cvtsudoers.cat
index 4e7283d0ee8de2638b101d3d278394cbf726d9ff..5634550ad91ffb568d91d9e35f5d2d99122f317a 100644 (file)
--- a/doc/cvtsudoers.cat
+++ b/doc/cvtsudoers.cat
@@ -117,11 +117,17 @@ D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
                  separated by a comma (`,').  The k\bke\bey\by may be "user", "group"
                  or "host".  For example, u\bus\bse\ber\br = _\bo_\bp_\be_\br_\ba_\bt_\bo_\br or h\bho\bos\bst\bt = _\bw_\bw_\bw.
 
-                 The password and group databases are not consulted when
-                 matching against the filter so the users and groups do not
-                 need to be present on the local system.  Only aliases that
-                 are referenced by the filtered policy rules will be
-                 displayed.
+                 A matching _\bs_\bu_\bd_\bo_\be_\br_\bs rule may also include users, groups and
+                 hosts that are not part of the _\bf_\bi_\bl_\bt_\be_\br.  This can happen when
+                 a rule includes multiple users, groups or hosts.  To prune
+                 out any non-matching user, group or host from the rules, the
+                 -\b-p\bp option may be used.
+
+                 By default, the password and group databases are not
+                 consulted when matching against the filter so the users and
+                 groups do not need to be present on the local system (see the
+                 -\b-M\bM option).  Only aliases that are referenced by the filtered
+                 policy rules will be displayed.
 
      -\b-M\bM, -\b--\b-m\bma\bat\btc\bch\bh-\b-l\blo\boc\bca\bal\bl
                  When the -\b-m\bm option is also specified, use password and group
@@ -231,4 +237,4 @@ D\bDI\bIS\bSC\bCL\bLA\bAI\bIM\bME\bER\bR
      file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
      complete details.
 
-Sudo 1.8.23                      April 4, 2018                     Sudo 1.8.23
+Sudo 1.8.23                      April 5, 2018                     Sudo 1.8.23

diff --git a/doc/cvtsudoers.man.in b/doc/cvtsudoers.man.in
index de472a19acb802b9d1b4ee93aa92d1087f623502..8af1333f8806af4a3ee8be541137af7b557087a3 100644 (file)
--- a/doc/cvtsudoers.man.in
+++ b/doc/cvtsudoers.man.in
@@ -16,7 +16,7 @@
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.TH "CVTSUDOERS" "1" "April 4, 2018" "Sudo @PACKAGE_VERSION@" "General Commands Manual"
+.TH "CVTSUDOERS" "1" "April 5, 2018" "Sudo @PACKAGE_VERSION@" "General Commands Manual"
 .nh
 .if n .ad l
 .SH "NAME"
@@ -232,9 +232,20 @@ For example,
 or
 \fBhost\fR = \fIwww\fR.
 .sp
-The password and group databases are not consulted when matching
+A matching
+\fIsudoers\fR
+rule may also include users, groups and hosts that are not part of the
+\fIfilter\fR.
+This can happen when a rule includes multiple users, groups or hosts.
+To prune out any non-matching user, group or host from the rules, the
+\fB\-p\fR
+option may be used.
+.sp
+By default, the password and group databases are not consulted when matching
 against the filter so the users and groups do not need to be present
-on the local system.
+on the local system (see the
+\fB\-M\fR
+option).
 Only aliases that are referenced by the filtered policy rules will
 be displayed.
 .TP 12n

diff --git a/doc/cvtsudoers.mdoc.in b/doc/cvtsudoers.mdoc.in
index 467fe8dacbe420a12dc3fe349d01eeb0f2e37b18..d21d07f42f6713b3c3e61ff98777611bc679e783 100644 (file)
--- a/doc/cvtsudoers.mdoc.in
+++ b/doc/cvtsudoers.mdoc.in
@@ -14,7 +14,7 @@
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd April 4, 2018
+.Dd April 5, 2018
 .Dt CVTSUDOERS 1
 .Os Sudo @PACKAGE_VERSION@
 .Sh NAME
@@ -187,9 +187,20 @@ For example,
 or
 .Sy host No = Ar www .
 .Pp
-The password and group databases are not consulted when matching
+A matching
+.Em sudoers
+rule may also include users, groups and hosts that are not part of the
+.Ar filter .
+This can happen when a rule includes multiple users, groups or hosts.
+To prune out any non-matching user, group or host from the rules, the
+.Fl p
+option may be used.
+.Pp
+By default, the password and group databases are not consulted when matching
 against the filter so the users and groups do not need to be present
-on the local system.
+on the local system (see the
+.Fl M
+option).
 Only aliases that are referenced by the filtered policy rules will
 be displayed.
 .It Fl M , Fl -match-local