Add a warning that for "sudo -i command" and "sudo -s command" the

shell is not run in interactive mode which may change its behavior.

diff --git a/doc/sudo.cat b/doc/sudo.cat
index a12f41e252dfc6beee77180ee5282ce501c2bbec..836b6d86665be56e0a0e3b3666bc6134433685bb 100644 (file)
--- a/doc/sudo.cat
+++ b/doc/sudo.cat
@@ -187,16 +187,19 @@ D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
      -\b-i\bi, -\b--\b-l\blo\bog\bgi\bin\bn
                  Run the shell specified by the target user's password
                  database entry as a login shell.  This means that login-
-                 specific resource files such as _\b._\bp_\br_\bo_\bf_\bi_\bl_\be or _\b._\bl_\bo_\bg_\bi_\bn will be
-                 read by the shell.  If a command is specified, it is passed
-                 to the shell for execution via the shell's -\b-c\bc option.  If no
-                 command is specified, an interactive shell is executed.  s\bsu\bud\bdo\bo
-                 attempts to change to that user's home directory before
-                 running the shell.  The command is run with an environment
-                 similar to the one a user would receive at log in.  The
-                 _\bC_\bo_\bm_\bm_\ba_\bn_\bd _\be_\bn_\bv_\bi_\br_\bo_\bn_\bm_\be_\bn_\bt section in the sudoers(4) manual
-                 documents how the -\b-i\bi option affects the environment in which
-                 a command is run when the _\bs_\bu_\bd_\bo_\be_\br_\bs policy is in use.
+                 specific resource files such as _\b._\bp_\br_\bo_\bf_\bi_\bl_\be, _\b._\bb_\ba_\bs_\bh_\b__\bp_\br_\bo_\bf_\bi_\bl_\be or
+                 _\b._\bl_\bo_\bg_\bi_\bn will be read by the shell.  If a command is specified,
+                 it is passed to the shell for execution via the shell's -\b-c\bc
+                 option.  If no command is specified, an interactive shell is
+                 executed.  s\bsu\bud\bdo\bo attempts to change to that user's home
+                 directory before running the shell.  The command is run with
+                 an environment similar to the one a user would receive at log
+                 in.  Note that most shells behave differently when a command
+                 is specified as compared to an interactive session; consult
+                 the shell's manual for details.  The _\bC_\bo_\bm_\bm_\ba_\bn_\bd _\be_\bn_\bv_\bi_\br_\bo_\bn_\bm_\be_\bn_\bt
+                 section in the sudoers(4) manual documents how the -\b-i\bi option
+                 affects the environment in which a command is run when the
+                 _\bs_\bu_\bd_\bo_\be_\br_\bs policy is in use.
 
      -\b-K\bK, -\b--\b-r\bre\bem\bmo\bov\bve\be-\b-t\bti\bim\bme\bes\bst\bta\bam\bmp\bp
                  Similar to the -\b-k\bk option, except that it removes the user's
@@ -289,6 +292,9 @@ D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
                  password database entry.  If a command is specified, it is
                  passed to the shell for execution via the shell's -\b-c\bc option.
                  If no command is specified, an interactive shell is executed.
+                 Note that most shells behave differently when a command is
+                 specified as compared to an interactive session; consult the
+                 shell's manual for details.
 
      -\b-t\bt _\bt_\by_\bp_\be, -\b--\b-t\bty\byp\bpe\be=_\bt_\by_\bp_\be
                  Run the command with an SELinux security context that
@@ -638,4 +644,4 @@ D\bDI\bIS\bSC\bCL\bLA\bAI\bIM\bME\bER\bR
      file distributed with s\bsu\bud\bdo\bo or https://www.sudo.ws/license.html for
      complete details.
 
-Sudo 1.8.21                     August 2, 2017                     Sudo 1.8.21
+Sudo 1.8.21                    October 12, 2017                    Sudo 1.8.21

diff --git a/doc/sudo.man.in b/doc/sudo.man.in
index e227a1b7b674120951df76add8c4ffe71b4a1321..51428fa397474f0620d4b339ab4170219b4f2099 100644 (file)
--- a/doc/sudo.man.in
+++ b/doc/sudo.man.in
@@ -21,7 +21,7 @@
 .\" Agency (DARPA) and Air Force Research Laboratory, Air Force
 .\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
 .\"
-.TH "SUDO" "8" "August 2, 2017" "Sudo @PACKAGE_VERSION@" "System Manager's Manual"
+.TH "SUDO" "8" "October 12, 2017" "Sudo @PACKAGE_VERSION@" "System Manager's Manual"
 .nh
 .if n .ad l
 .SH "NAME"
@@ -385,7 +385,8 @@ option to list a user's privileges for the remote host.
 Run the shell specified by the target user's password database entry
 as a login shell.
 This means that login-specific resource files such as
-\fI.profile\fR
+\fI.profile\fR,
+\fI.bash_profile\fR
 or
 \fI.login\fR
 will be read by the shell.
@@ -399,6 +400,9 @@ attempts to change to that user's home directory before running the
 shell.
 The command is run with an environment similar to the one
 a user would receive at log in.
+Note that most shells behave differently when a command is specified
+as compared to an interactive session; consult the shell's manual
+for details.
 The
 \fICommand environment\fR
 section in the
@@ -556,6 +560,9 @@ via the shell's
 \fB\-c\fR
 option.
 If no command is specified, an interactive shell is executed.
+Note that most shells behave differently when a command is specified
+as compared to an interactive session; consult the shell's manual
+for details.
 .TP 12n
 \fB\-t\fR \fItype\fR, \fB\--type\fR=\fItype\fR
 Run the command with an SELinux security context that includes

diff --git a/doc/sudo.mdoc.in b/doc/sudo.mdoc.in
index f13405c1c7e59b6b67c03e1356fafc629602a42d..afba9d6a289e8c3240f4a97d057306269156d735 100644 (file)
--- a/doc/sudo.mdoc.in
+++ b/doc/sudo.mdoc.in
@@ -19,7 +19,7 @@
 .\" Agency (DARPA) and Air Force Research Laboratory, Air Force
 .\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
 .\"
-.Dd August 2, 2017
+.Dd October 12, 2017
 .Dt SUDO @mansectsu@
 .Os Sudo @PACKAGE_VERSION@
 .Sh NAME
@@ -347,7 +347,8 @@ option to list a user's privileges for the remote host.
 Run the shell specified by the target user's password database entry
 as a login shell.
 This means that login-specific resource files such as
-.Pa .profile
+.Pa .profile ,
+.Pa .bash_profile
 or
 .Pa .login
 will be read by the shell.
@@ -361,6 +362,9 @@ attempts to change to that user's home directory before running the
 shell.
 The command is run with an environment similar to the one
 a user would receive at log in.
+Note that most shells behave differently when a command is specified
+as compared to an interactive session; consult the shell's manual
+for details.
 The
 .Em Command environment
 section in the
@@ -500,6 +504,9 @@ via the shell's
 .Fl c
 option.
 If no command is specified, an interactive shell is executed.
+Note that most shells behave differently when a command is specified
+as compared to an interactive session; consult the shell's manual
+for details.
 .It Fl t Ar type , Fl -type Ns = Ns Ar type
 Run the command with an SELinux security context that includes
 the specified