Emphasis on the never.

diff --git a/doc/sudo.cat b/doc/sudo.cat
index e329e7925d520ee2e7d5c8bd6679f49e7a07bd72..acdcd4699bda8c460471c7bda03950f02a94f1f1 100644 (file)
--- a/doc/sudo.cat
+++ b/doc/sudo.cat
@@ -433,11 +433,11 @@ S\bSE\bEC\bCU\bUR\bRI\bIT\bTY\bY N\bNO\bOT\bTE\bES\bS
      environment variable is _\bn_\bo_\bt modified and is passed unchanged to the
      program that s\bsu\bud\bdo\bo executes.
 
-     Users should not be granted s\bsu\bud\bdo\bo privileges to execute files that are
+     Users should _\bn_\be_\bv_\be_\br be granted s\bsu\bud\bdo\bo privileges to execute files that are
      writable by the user or that reside in a directory that is writable by
      the user.  If the user can modify or replace the command there is no way
      to limit what additional commands they can run.  Likewise, users should
-     not be granted s\bsu\bud\bdo\boe\bed\bdi\bit\bt permission to edit a file that resides in a
+     _\bn_\be_\bv_\be_\br be granted s\bsu\bud\bdo\boe\bed\bdi\bit\bt permission to edit a file that resides in a
      directory the user has write access to.  A user with directory write
      access could replace the legitimate file with a link to some other,
      arbitrary, file.  Starting with version 1.8.15, s\bsu\bud\bdo\boe\bed\bdi\bit\bt will refuse to

diff --git a/doc/sudo.man.in b/doc/sudo.man.in
index 43e8a877ce125ed1a68090426753acb5f6e1cc2a..642444005bbe0a145189f45c355a713db310904d 100644 (file)
--- a/doc/sudo.man.in
+++ b/doc/sudo.man.in
@@ -869,13 +869,17 @@ modified and is passed unchanged to the program that
 \fBsudo\fR
 executes.
 .PP
-Users should not be granted
+Users should
+\fInever\fR
+be granted
 \fBsudo\fR
 privileges to execute files that are writable by the user or
 that reside in a directory that is writable by the user.
 If the user can modify or replace the command there is no way
 to limit what additional commands they can run.
-Likewise, users should not be granted
+Likewise, users should
+\fInever\fR
+be granted
 \fBsudoedit\fR
 permission to edit a file that resides in a directory the user has
 write access to.

diff --git a/doc/sudo.mdoc.in b/doc/sudo.mdoc.in
index 119fff9135e80aeffb37e5043a1280a146053184..654722ea53399bc5b3db0ce223034527569897d9 100644 (file)
--- a/doc/sudo.mdoc.in
+++ b/doc/sudo.mdoc.in
@@ -804,13 +804,17 @@ modified and is passed unchanged to the program that
 .Nm
 executes.
 .Pp
-Users should not be granted
+Users should
+.Em never
+be granted
 .Nm
 privileges to execute files that are writable by the user or
 that reside in a directory that is writable by the user.
 If the user can modify or replace the command there is no way
 to limit what additional commands they can run.
-Likewise, users should not be granted
+Likewise, users should
+.Em never
+be granted
 .Nm sudoedit
 permission to edit a file that resides in a directory the user has
 write access to.

diff --git a/doc/sudoers.cat b/doc/sudoers.cat
index fca92d33130cf7aff57904687dbcb9adc587b0ac..16aa52c983bc7c3f6a2164dceba0649d0e85bf0d 100644 (file)
--- a/doc/sudoers.cat
+++ b/doc/sudoers.cat
@@ -2310,7 +2310,7 @@ S\bSE\bEC\bCU\bUR\bRI\bIT\bTY\bY N\bNO\bOT\bTE\bES\bS
      of _\b/_\be_\bt_\bc_\b/_\bm_\bo_\bt_\bd.  After the file has been edited, _\b/_\be_\bt_\bc_\b/_\bm_\bo_\bt_\bd will be updated
      with the contents of the temporary copy.
 
-     Users should never be granted s\bsu\bud\bdo\boe\bed\bdi\bit\bt permission to edit a file that
+     Users should _\bn_\be_\bv_\be_\br be granted s\bsu\bud\bdo\boe\bed\bdi\bit\bt permission to edit a file that
      resides in a directory the user has write access to, either directly or
      via a wildcard.  If the user has write access to the directory it is
      possible to replace the legitimate file with a link to another file,

diff --git a/doc/sudoers.man.in b/doc/sudoers.man.in
index aee2c3a3abb0e2fa977fba05e38dbee00d2580f1..4e459753154889819fd930aa37a38f3eb45ce35d 100644 (file)
--- a/doc/sudoers.man.in
+++ b/doc/sudoers.man.in
@@ -4725,7 +4725,9 @@ After the file has been edited,
 \fI/etc/motd\fR
 will be updated with the contents of the temporary copy.
 .PP
-Users should never be granted
+Users should
+\fInever\fR
+be granted
 \fBsudoedit\fR
 permission to edit a file that resides in a directory the user
 has write access to, either directly or via a wildcard.

diff --git a/doc/sudoers.mdoc.in b/doc/sudoers.mdoc.in
index ca1ae19630651dca10bbde2e5bfb10711b77f320..9b8886a0c704a8bbad33dbd5b369a9c373e8d558 100644 (file)
--- a/doc/sudoers.mdoc.in
+++ b/doc/sudoers.mdoc.in
@@ -4357,7 +4357,9 @@ After the file has been edited,
 .Pa /etc/motd
 will be updated with the contents of the temporary copy.
 .Pp
-Users should never be granted
+Users should
+.Em never
+be granted
 .Nm sudoedit
 permission to edit a file that resides in a directory the user
 has write access to, either directly or via a wildcard.