$ sudo sh -c "cd /home ; du -s * | sort -rn > USAGE"
S\bSE\bEE\bE A\bAL\bLS\bSO\bO
- su(1), stat(2), login_cap(3), passwd(4), sudo.conf(4), sudoers(4),
- sudo_plugin(4), sudoreplay(1m), visudo(1m)
+ su(1), stat(2), login_cap(3), passwd(4), sudo.conf(4), sudo_plugin(4),
+ sudoers(4), sudoreplay(1m), visudo(1m)
H\bHI\bIS\bST\bTO\bOR\bRY\bY
See the HISTORY file in the s\bsu\bud\bdo\bo distribution
file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
complete details.
-Sudo 1.8.23 March 21, 2018 Sudo 1.8.23
+Sudo 1.8.24 March 21, 2018 Sudo 1.8.24
without compromising security. To actually get a s\bsu\bud\bdo\bo core
file you will likely need to enable core dumps for setuid
processes. On BSD and Linux systems this is accomplished in
- the sysctl command. On Solaris, the coreadm command is used to
- configure core dump behavior.
+ the sysctl(1m) command. On Solaris, the coreadm(1m) command is
+ used to configure core dump behavior.
This setting is only available in s\bsu\bud\bdo\bo version 1.8.4 and
higher.
The priorities _\bt_\br_\ba_\bc_\be and _\bd_\be_\bb_\bu_\bg also include function call tracing which
logs when a function is entered and when it returns. For example, the
- following trace is for the get_user_groups() function located in
+ following trace is for the g\bge\bet\bt_\b_u\bus\bse\ber\br_\b_g\bgr\bro\bou\bup\bps\bs() function located in
src/sudo.c:
sudo[123] -> get_user_groups @ src/sudo.c:385
#Set group_source static
S\bSE\bEE\bE A\bAL\bLS\bSO\bO
- sudoers(4), sudo(1m), sudo_plugin(4)
+ sudo_plugin(4), sudoers(4), sudo(1m)
H\bHI\bIS\bST\bTO\bOR\bRY\bY
See the HISTORY file in the s\bsu\bud\bdo\bo distribution
file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
complete details.
-Sudo 1.8.23 July 21, 2017 Sudo 1.8.23
+Sudo 1.8.24 July 21, 2017 Sudo 1.8.24
\fBsudo\fR
core file you will likely need to enable core dumps for setuid processes.
On BSD and Linux systems this is accomplished in the
-sysctl
+sysctl(@mansectsu@)
command.
On Solaris, the
-coreadm
+coreadm(1m)
command is used to configure core dump behavior.
.sp
This setting is only available in
\fIdebug\fR
also include function call tracing which logs when a function is
entered and when it returns.
-For example, the following trace is for the get_user_groups()
+For example, the following trace is for the
+\fBget_user_groups\fR()
function located in src/sudo.c:
.nf
.sp
.RE
.fi
.SH "SEE ALSO"
+sudo_plugin(@mansectform@),
sudoers(@mansectform@),
-sudo(@mansectsu@),
-sudo_plugin(@mansectform@)
+sudo(@mansectsu@)
.SH "HISTORY"
See the HISTORY file in the
\fBsudo\fR
.Nm sudo
core file you will likely need to enable core dumps for setuid processes.
On BSD and Linux systems this is accomplished in the
-.Xr sysctl
+.Xr sysctl 8
command.
On Solaris, the
-.Xr coreadm
+.Xr coreadm 1m
command is used to configure core dump behavior.
.Pp
This setting is only available in
.Em debug
also include function call tracing which logs when a function is
entered and when it returns.
-For example, the following trace is for the get_user_groups()
+For example, the following trace is for the
+.Fn get_user_groups
function located in src/sudo.c:
.Bd -literal -offset indent
sudo[123] -> get_user_groups @ src/sudo.c:385
#Set group_source static
.Ed
.Sh SEE ALSO
+.Xr sudo_plugin @mansectform@ ,
.Xr sudoers @mansectform@ ,
-.Xr sudo @mansectsu@ ,
-.Xr sudo_plugin @mansectform@
+.Xr sudo @mansectsu@
.Sh HISTORY
See the HISTORY file in the
.Nm sudo
-.\" DO NOT EDIT THIS FILE, IT IS NOT THE MASTER!
-.\" IT IS GENERATED AUTOMATICALLY FROM sudo.mdoc.in
+.\" Automatically generated from an mdoc input file. Do not edit.
.\"
.\" Copyright (c) 1994-1996, 1998-2005, 2007-2018
.\" Todd C. Miller <Todd.Miller@sudo.ws>
as the superuser or another user, as specified by the security
policy.
The invoking user's real
-(\fInot\fR
-effective) user ID is used to determine the user name with which
+(\fInot\fR effective)
+user ID is used to determine the user name with which
to query the security policy.
.PP
\fBsudo\fR
login_cap(3),
passwd(@mansectform@),
sudo.conf(@mansectform@),
-sudoers(@mansectform@),
sudo_plugin(@mansectform@),
+sudoers(@mansectform@),
sudoreplay(@mansectsu@),
visudo(@mansectsu@)
.SH "HISTORY"
as the superuser or another user, as specified by the security
policy.
The invoking user's real
-.No ( Em not
-effective) user ID is used to determine the user name with which
+.Pq Em not No effective
+user ID is used to determine the user name with which
to query the security policy.
.Pp
.Nm
.Xr login_cap 3 ,
.Xr passwd @mansectform@ ,
.Xr sudo.conf @mansectform@ ,
-.Xr sudoers @mansectform@ ,
.Xr sudo_plugin @mansectform@ ,
+.Xr sudoers @mansectform@ ,
.Xr sudoreplay @mansectsu@ ,
.Xr visudo @mansectsu@
.Sh HISTORY
See the
\fIPolicy plugin API\fR
section for a description of
-\fRderegister_hooks.\fR
+\fRderegister_hooks\fR.
.TP 6n
change_winsize
.nf
See the
.Sx Policy plugin API
section for a description of
-.Li deregister_hooks.
+.Li deregister_hooks .
.It change_winsize
.Bd -literal -compact
int (*change_winsize)(unsigned int lines, unsigned int cols);
initialization function. If arguments are present, the
string must be enclosed in double quotes ("").
- For more information see GROUP PROVIDER PLUGINS.
+ For more information see _\bG_\bR_\bO_\bU_\bP _\bP_\bR_\bO_\bV_\bI_\bD_\bE_\bR _\bP_\bL_\bU_\bG_\bI_\bN_\bS.
lecture This option controls when a short lecture will be printed
along with the password prompt. It has the following
Setting a path turns on logging to a file; negating this
option turns it off. By default, s\bsu\bud\bdo\bo logs via syslog.
- mailerflags Flags to use when invoking mailer. Defaults to -\b-t\bt.
+ mailerflags Flags to use when invoking mailer. Defaults to -\b-t\bt.
mailerpath Path to mail program used to send warning mail. Defaults
to the path to sendmail found at configure time.
S\bSE\bEE\bE A\bAL\bLS\bSO\bO
ssh(1), su(1), fnmatch(3), glob(3), mktemp(3), strftime(3), sudo.conf(4),
- sudoers.ldap(4), sudo(1m), sudo_plugin(4), sudoers_timestamp(4), visudo(1m)
+ sudo_plugin(4), sudoers.ldap(4), sudoers_timestamp(4), sudo(1m), visudo(1m)
A\bAU\bUT\bTH\bHO\bOR\bRS\bS
Many people have worked on s\bsu\bud\bdo\bo over the years; this version consists of
file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
complete details.
-Sudo 1.8.23 April 18, 2018 Sudo 1.8.23
+Sudo 1.8.24 April 18, 2018 Sudo 1.8.24
as. The special value ALL will match any user. If sudoRunAsUser
is specified but empty, it will match the invoking user. If
neither sudoRunAsUser nor sudoRunAsGroup are present, the value of
- the runas_default sudoOption is used (defaults to root ).
+ the _\br_\bu_\bn_\ba_\bs_\b__\bd_\be_\bf_\ba_\bu_\bl_\bt sudoOption is used (defaults to root).
The sudoRunAsUser attribute is only available in s\bsu\bud\bdo\bo versions
1.7.0 and higher. Older versions of s\bsu\bud\bdo\bo use the sudoRunAs
file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
complete details.
-Sudo 1.8.23 March 29, 2018 Sudo 1.8.23
+Sudo 1.8.24 March 29, 2018 Sudo 1.8.24
nor
\fRsudoRunAsGroup\fR
are present, the value of the
-runas_default
+\fIrunas_default\fR
\fRsudoOption\fR
is used (defaults to
-\fR@runas_default@ ).\fR
+\fR@runas_default@\fR).
.sp
The
\fRsudoRunAsUser\fR
nor
.Li sudoRunAsGroup
are present, the value of the
-.En runas_default
+.Em runas_default
.Li sudoOption
is used (defaults to
-.Li @runas_default@ ).
+.Li @runas_default@ ) .
.Pp
The
.Li sudoRunAsUser
-.\" DO NOT EDIT THIS FILE, IT IS NOT THE MASTER!
-.\" IT IS GENERATED AUTOMATICALLY FROM sudoers.mdoc.in
-.\"
-.\" Copyright (c) 1994-1996, 1998-2005, 2007-2018
-.\" Todd C. Miller <Todd.Miller@sudo.ws>
-.\"
-.\" Permission to use, copy, modify, and distribute this software for any
-.\" purpose with or without fee is hereby granted, provided that the above
-.\" copyright notice and this permission notice appear in all copies.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
-.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-.\"
-.\" Sponsored in part by the Defense Advanced Research Projects
-.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
-.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
-.\"
.\" Automatically generated from an mdoc input file. Do not edit.
.\"
.\" Copyright (c) 1994-1996, 1998-2005, 2007-2018
(\&"").
.sp
For more information see
-GROUP PROVIDER PLUGINS.
+\fIGROUP PROVIDER PLUGINS\fR.
.TP 14n
lecture
This option controls when a short lecture will be printed along with
logs via syslog.
.TP 14n
mailerflags
-Flags to use when invoking mailer. Defaults to
+Flags to use when invoking mailer.
+Defaults to
\fB\-t\fR.
.TP 14n
mailerpath
mktemp(3),
strftime(3),
sudo.conf(@mansectform@),
-sudoers.ldap(@mansectform@),
-sudo(@mansectsu@),
sudo_plugin(@mansectform@),
+sudoers.ldap(@mansectform@),
sudoers_timestamp(@mansectform@),
+sudo(@mansectsu@),
visudo(@mansectsu@)
.SH "AUTHORS"
Many people have worked on
syntax depends on
the underlying group provider plugin.
For instance, the QAS AD plugin supports the following formats:
-.Bl -bullet -width 4n -width 1n
+.Bl -bullet -width 1n
.It
Group in the same domain: "%:Group Name"
.It
.Em editor .
If the
.Em env_reset
-flag is enabled, the
+flag is enabled, the
.Ev SUDO_EDITOR ,
.Ev VISUAL
and/or
files and directories.
If
.Em iolog_group
-is not set,
+is not set,
the primary group ID of the user specified by
.Em iolog_user
is used.
.Pq \&"" .
.Pp
For more information see
-.Xr "GROUP PROVIDER PLUGINS" .
+.Sx "GROUP PROVIDER PLUGINS" .
.It lecture
This option controls when a short lecture will be printed along with
the password prompt.
.Nm sudo
logs via syslog.
.It mailerflags
-Flags to use when invoking mailer. Defaults to
+Flags to use when invoking mailer.
+Defaults to
.Fl t .
.It mailerpath
Path to mail program used to send warning mail.
or
.Em env_keep
list.
-If
+If
.Em env_reset
is disabled, variables in the file are added as long as they
are not matched by the
.Xr mktemp 3 ,
.Xr strftime 3 ,
.Xr sudo.conf @mansectform@ ,
-.Xr sudoers.ldap @mansectform@ ,
-.Xr sudo @mansectsu@ ,
.Xr sudo_plugin @mansectform@ ,
+.Xr sudoers.ldap @mansectform@ ,
.Xr sudoers_timestamp @mansectform@ ,
+.Xr sudo @mansectsu@ ,
.Xr visudo @mansectsu@
.Sh AUTHORS
Many people have worked on
same terminal (or parent process ID) from from prompting for a password
as the same time.
+S\bSE\bEE\bE A\bAL\bLS\bSO\bO
+ sudoers(4), sudo(1m)
+
H\bHI\bIS\bST\bTO\bOR\bRY\bY
Originally, s\bsu\bud\bdo\bo used a single zero-length file per user and the file's
modification time was used as the time stamp. Later versions of s\bsu\bud\bdo\bo
Support was added for the kernel-based tty time stamps available in
OpenBSD which do not use an on-disk time stamp file.
-S\bSE\bEE\bE A\bAL\bLS\bSO\bO
- sudoers(4), sudo(1m)
-
A\bAU\bUT\bTH\bHO\bOR\bRS\bS
Many people have worked on s\bsu\bud\bdo\bo over the years; this version consists of
code written primarily by:
file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
complete details.
-Sudo 1.8.23 December 21, 2017 Sudo 1.8.23
+Sudo 1.8.24 December 21, 2017 Sudo 1.8.24
-.\" DO NOT EDIT THIS FILE, IT IS NOT THE MASTER!
-.\" IT IS GENERATED AUTOMATICALLY FROM sudoers_timestamp.mdoc.in
+.\" Automatically generated from an mdoc input file. Do not edit.
.\"
.\" Copyright (c) 2017 Todd C. Miller <Todd.Miller@sudo.ws>
.\"
\fBsudo\fR
1.8.10 that uses a single file per user.
Previously, a separate file was used for each user and terminal
-combination unless tty-based time stamps were disabled. The new
-format is extensible and records of multiple types and versions may
-coexist within the same file.
+combination unless tty-based time stamps were disabled.
+The new format is extensible and records of multiple types and versions
+may coexist within the same file.
.PP
All records, regardless of type or version, begin with a 16-bit version
number and a 16-bit record size.
\fBsudo\fR
processes using the same terminal (or parent process ID) from
from prompting for a password as the same time.
+.SH "SEE ALSO"
+sudoers(@mansectform@),
+sudo(@mansectsu@)
.SH "HISTORY"
Originally,
\fBsudo\fR
.sp
Support was added for the kernel-based tty time stamps available in
OpenBSD which do not use an on-disk time stamp file.
-.SH "SEE ALSO"
-sudoers(@mansectform@),
-sudo(@mansectsu@)
.SH "AUTHORS"
Many people have worked on
\fBsudo\fR
.Nm sudo
1.8.10 that uses a single file per user.
Previously, a separate file was used for each user and terminal
-combination unless tty-based time stamps were disabled. The new
-format is extensible and records of multiple types and versions may
-coexist within the same file.
+combination unless tty-based time stamps were disabled.
+The new format is extensible and records of multiple types and versions
+may coexist within the same file.
.Pp
All records, regardless of type or version, begin with a 16-bit version
number and a 16-bit record size.
.Nm sudo
processes using the same terminal (or parent process ID) from
from prompting for a password as the same time.
+.Sh SEE ALSO
+.Xr sudoers @mansectform@ ,
+.Xr sudo @mansectsu@
.Sh HISTORY
Originally,
.Nm sudo
Support was added for the kernel-based tty time stamps available in
OpenBSD which do not use an on-disk time stamp file.
.El
-.Sh SEE ALSO
-.Xr sudoers @mansectform@ ,
-.Xr sudo @mansectsu@
.Sh AUTHORS
Many people have worked on
.Nm sudo
file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
complete details.
-Sudo 1.8.23 January 26, 2018 Sudo 1.8.23
+Sudo 1.8.24 January 26, 2018 Sudo 1.8.24
-.\" DO NOT EDIT THIS FILE, IT IS NOT THE MASTER!
-.\" IT IS GENERATED AUTOMATICALLY FROM visudo.mdoc.in
+.\" Automatically generated from an mdoc input file. Do not edit.
.\"
.\" Copyright (c) 1996,1998-2005, 2007-2018
.\" Todd C. Miller <Todd.Miller@sudo.ws>
option is enabled.
The default editor path is
.Pa @editor@
-which can be set at compile time via the
+which can be set at compile time via the
.Li --with-editor
configure option.
.It env_editor
.Em editor .
If the
.Em env_reset
-flag is enabled, the
+flag is enabled, the
.Ev SUDO_EDITOR ,
.Ev VISUAL
and/or
.Nm sudo .
The default value is
.Em @env_editor@ ,
-which can be set at compile time via the
+which can be set at compile time via the
.Li --with-env-editor
configure option.
.El