Add wordexp() to the list of functions wrapped by sudo_noexec.so.

diff --git a/doc/sudo.conf.cat b/doc/sudo.conf.cat
index 5d27f05e7bc9941b4cff711a22bd044cecec200e..ebe1f8c4d87ad5079b584b06d805336c13fb6468 100644 (file)
--- a/doc/sudo.conf.cat
+++ b/doc/sudo.conf.cat
@@ -106,13 +106,13 @@ D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
                _\ba_\bs_\bk_\bp_\ba_\bs_\bs may be overridden by the SUDO_ASKPASS environment
                variable.
 
-     noexec    The fully-qualified path to a shared library containing dummy
-               versions of the e\bex\bxe\bec\bcl\bl(), e\bex\bxe\bec\bcl\ble\be(), e\bex\bxe\bec\bcl\blp\bp(), e\bex\bxe\bec\bct\bt(), e\bex\bxe\bec\bcv\bv(),
+     noexec    The fully-qualified path to a shared library containing
+               wrappers for the e\bex\bxe\bec\bcl\bl(), e\bex\bxe\bec\bcl\ble\be(), e\bex\bxe\bec\bcl\blp\bp(), e\bex\bxe\bec\bct\bt(), e\bex\bxe\bec\bcv\bv(),
                e\bex\bxe\bec\bcv\bve\be(), e\bex\bxe\bec\bcv\bvP\bP(), e\bex\bxe\bec\bcv\bvp\bp(), e\bex\bxe\bec\bcv\bvp\bpe\be(), f\bfe\bex\bxe\bec\bcv\bve\be(), p\bpo\bop\bpe\ben\bn(),
-               p\bpo\bos\bsi\bix\bx_\b_s\bsp\bpa\baw\bwn\bn(), p\bpo\bos\bsi\bix\bx_\b_s\bsp\bpa\baw\bwn\bnp\bp(), and s\bsy\bys\bst\bte\bem\bm() library functions
-               that just return an error.  This is used to implement the
-               _\bn_\bo_\be_\bx_\be_\bc functionality on systems that support LD_PRELOAD or its
-               equivalent.  The default value is:
+               p\bpo\bos\bsi\bix\bx_\b_s\bsp\bpa\baw\bwn\bn(), p\bpo\bos\bsi\bix\bx_\b_s\bsp\bpa\baw\bwn\bnp\bp(), s\bsy\bys\bst\bte\bem\bm(), and w\bwo\bor\brd\bde\bex\bxp\bp() library
+               functions that prevent the execution of further commands.  This
+               is used to implement the _\bn_\bo_\be_\bx_\be_\bc functionality on systems that
+               support LD_PRELOAD or its equivalent.  The default value is:
                _\b/_\bu_\bs_\br_\b/_\bl_\bo_\bc_\ba_\bl_\b/_\bl_\bi_\bb_\be_\bx_\be_\bc_\b/_\bs_\bu_\bd_\bo_\b/_\bs_\bu_\bd_\bo_\b__\bn_\bo_\be_\bx_\be_\bc_\b._\bs_\bo.
 
      plugin_dir
@@ -418,4 +418,4 @@ D\bDI\bIS\bSC\bCL\bLA\bAI\bIM\bME\bER\bR
      file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
      complete details.
 
-Sudo 1.8.18                      June 15, 2016                     Sudo 1.8.18
+Sudo 1.8.18                    October 15, 2016                    Sudo 1.8.18

diff --git a/doc/sudo.conf.man.in b/doc/sudo.conf.man.in
index f67984a172519168a02f2d36715e031060b126c0..88cb7cb94112a13c23533f3a3c49e60a9b555b8b 100644 (file)
--- a/doc/sudo.conf.man.in
+++ b/doc/sudo.conf.man.in
@@ -16,7 +16,7 @@
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.TH "SUDO.CONF" "5" "June 15, 2016" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
+.TH "SUDO.CONF" "5" "October 15, 2016" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
 .nh
 .if n .ad l
 .SH "NAME"
@@ -239,8 +239,8 @@ may be overridden by the
 environment variable.
 .TP 10n
 noexec
-The fully-qualified path to a shared library containing dummy
-versions of the
+The fully-qualified path to a shared library containing wrappers
+for the
 \fBexecl\fR(),
 \fBexecle\fR(),
 \fBexeclp\fR(),
@@ -254,9 +254,10 @@ versions of the
 \fBpopen\fR(),
 \fBposix_spawn\fR(),
 \fBposix_spawnp\fR(),
+\fBsystem\fR(),
 and
-\fBsystem\fR()
-library functions that just return an error.
+\fBwordexp\fR()
+library functions that prevent the execution of further commands.
 This is used to implement the
 \fInoexec\fR
 functionality on systems that support

diff --git a/doc/sudo.conf.mdoc.in b/doc/sudo.conf.mdoc.in
index ebb089eed4aecfb46e3352bcf3914f5399edb823..f10d31cd3f0d00798348b770921d089da2ef1774 100644 (file)
--- a/doc/sudo.conf.mdoc.in
+++ b/doc/sudo.conf.mdoc.in
@@ -14,7 +14,7 @@
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd June 15, 2016
+.Dd October 15, 2016
 .Dt SUDO.CONF @mansectform@
 .Os Sudo @PACKAGE_VERSION@
 .Sh NAME
@@ -216,8 +216,8 @@ may be overridden by the
 .Ev SUDO_ASKPASS
 environment variable.
 .It noexec
-The fully-qualified path to a shared library containing dummy
-versions of the
+The fully-qualified path to a shared library containing wrappers
+for the
 .Fn execl ,
 .Fn execle ,
 .Fn execlp ,
@@ -231,9 +231,10 @@ versions of the
 .Fn popen ,
 .Fn posix_spawn ,
 .Fn posix_spawnp ,
+.Fn system ,
 and
-.Fn system
-library functions that just return an error.
+.Fn wordexp
+library functions that prevent the execution of further commands.
 This is used to implement the
 .Em noexec
 functionality on systems that support