Document that commands matched by "sudo ALL" are not affected by

fdexec.

diff --git a/doc/sudoers.cat b/doc/sudoers.cat
index b2101c8827a617dc245b274a481d2bc7b9f4c407..5b77e438e89cf2375f4ce79617c8c0641f950143 100644 (file)
--- a/doc/sudoers.cat
+++ b/doc/sudoers.cat
@@ -1852,6 +1852,10 @@ S\bSU\bUD\bDO\bOE\bER\bRS\bS O\bOP\bPT\bTI\bIO\bON\bNS\bS
                    A workaround is to use the SUDO_COMMAND environment
                    variable instead.
 
+                   The _\bf_\bd_\be_\bx_\be_\bc setting is only used when the command is matched
+                   by path name.  It has no effect if the command is matched
+                   by the built-in A\bAL\bLL\bL alias.
+
                    This setting is only supported by version 1.8.20 or higher.
                    If the operating system does not support the fexecve(2)
                    system call, this setting has no effect.
@@ -2792,4 +2796,4 @@ D\bDI\bIS\bSC\bCL\bLA\bAI\bIM\bME\bER\bR
      file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
      complete details.
 
-Sudo 1.8.20                     March 22, 2017                     Sudo 1.8.20
+Sudo 1.8.20                     March 27, 2017                     Sudo 1.8.20

diff --git a/doc/sudoers.man.in b/doc/sudoers.man.in
index db3b473a4a722d1915df9e56accdde6f321f0245..0716489a6646368b56a78b9bd8320134f250c34c 100644 (file)
--- a/doc/sudoers.man.in
+++ b/doc/sudoers.man.in
@@ -21,7 +21,7 @@
 .\" Agency (DARPA) and Air Force Research Laboratory, Air Force
 .\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
 .\"
-.TH "SUDOERS" "5" "March 22, 2017" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
+.TH "SUDOERS" "5" "March 27, 2017" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
 .nh
 .if n .ad l
 .SH "NAME"
@@ -3700,6 +3700,13 @@ A workaround is to use the
 \fRSUDO_COMMAND\fR
 environment variable instead.
 .sp
+The
+\fIfdexec\fR
+setting is only used when the command is matched by path name.
+It has no effect if the command is matched by the built-in
+\fBALL\fR
+alias.
+.sp
 This setting is only supported by version 1.8.20 or higher.
 If the operating system does not support the
 fexecve(2)

diff --git a/doc/sudoers.mdoc.in b/doc/sudoers.mdoc.in
index 4b51c486ea223585d4177eef10177e4fe667f101..c7748c3118f678b1314978d7278c0e3e28e5a908 100644 (file)
--- a/doc/sudoers.mdoc.in
+++ b/doc/sudoers.mdoc.in
@@ -19,7 +19,7 @@
 .\" Agency (DARPA) and Air Force Research Laboratory, Air Force
 .\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
 .\"
-.Dd March 22, 2017
+.Dd March 27, 2017
 .Dt SUDOERS @mansectform@
 .Os Sudo @PACKAGE_VERSION@
 .Sh NAME
@@ -3457,6 +3457,13 @@ A workaround is to use the
 .Dv SUDO_COMMAND
 environment variable instead.
 .Pp
+The
+.Em fdexec
+setting is only used when the command is matched by path name.
+It has no effect if the command is matched by the built-in
+.Sy ALL
+alias.
+.Pp
 This setting is only supported by version 1.8.20 or higher.
 If the operating system does not support the
 .Xr fexecve 2