From: Todd C. Miller Date: Sun, 22 May 2011 12:36:17 +0000 (-0400) Subject: Regen for sudo 1.8.2 X-Git-Tag: SUDO_1_8_2~125 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=038fa9f88a4114597cf47845c6887d57be826f0d;p=sudo Regen for sudo 1.8.2 --HG-- branch : 1.8 --- diff --git a/doc/sudo.cat b/doc/sudo.cat index d813e6b1f..b27dc2b1d 100644 --- a/doc/sudo.cat +++ b/doc/sudo.cat @@ -1,9 +1,7 @@ +SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - NNAAMMEE sudo, sudoedit - execute a command as another user @@ -57,19 +55,6 @@ DDEESSCCRRIIPPTTIIOONN If an I/O plugin is configured, the running command's input and output may be logged as well. - - - - -1.8.1 April 9, 2011 1 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - OOPPTTIIOONNSS ssuuddoo accepts the following command line options: @@ -125,17 +110,6 @@ OOPPTTIIOONNSS is already root. This option is only available on systems with BSD login classes. - - -1.8.1 April 9, 2011 2 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - -D _l_e_v_e_l Enable debugging of ssuuddoo plugins and ssuuddoo itself. The _l_e_v_e_l may be a value from 1 through 9. @@ -190,18 +164,6 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) behavior. -h The --hh (_h_e_l_p) option causes ssuuddoo to print a short help - - - -1.8.1 April 9, 2011 3 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - message to the standard output and exit. -i [command] @@ -256,18 +218,6 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) messages and exit. -P The --PP (_p_r_e_s_e_r_v_e _g_r_o_u_p _v_e_c_t_o_r) option causes ssuuddoo to - - - -1.8.1 April 9, 2011 4 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - preserve the invoking user's group vector unaltered. By default, the _s_u_d_o_e_r_s policy will initialize the group vector to the list of groups the target user is in. The @@ -322,18 +272,6 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) role. -U _u_s_e_r The --UU (_o_t_h_e_r _u_s_e_r) option is used in conjunction with the - - - -1.8.1 April 9, 2011 5 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - --ll option to specify the user whose privileges should be listed. The security policy may restrict listing other users' privileges. The _s_u_d_o_e_r_s policy only allows root or @@ -384,22 +322,6 @@ PPLLUUGGIINNSS security policy and I/O logging, which corresponds to the following _/_e_t_c_/_s_u_d_o_._c_o_n_f file. - - - - - - - -1.8.1 April 9, 2011 6 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - # # Default /etc/sudo.conf file # @@ -454,18 +376,6 @@ PPAATTHHSS that support LD_PRELOAD or its equivalent. Defaults to _/_u_s_r_/_l_o_c_a_l_/_l_i_b_e_x_e_c_/_s_u_d_o___n_o_e_x_e_c_._s_o. - - - -1.8.1 April 9, 2011 7 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - RREETTUURRNN VVAALLUUEESS Upon successful execution of a program, the exit status from ssuuddoo will simply be the exit status of the program that was executed. @@ -521,17 +431,6 @@ EENNVVIIRROONNMMEENNTT SHELL Used to determine shell to run with -s option - - -1.8.1 April 9, 2011 8 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - SUDO_ASKPASS Specifies the path to a helper program used to read the password if no terminal is available or if the -A option is specified. @@ -587,17 +486,6 @@ EEXXAAMMPPLLEESS To shutdown a machine: - - -1.8.1 April 9, 2011 9 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - $ sudo shutdown -r +15 "quick reboot" To make a usage listing of the directories in the /home partition. @@ -652,75 +540,8 @@ DDIISSCCLLAAIIMMEERR including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. See the LICENSE file distributed with ssuuddoo or - - - -1.8.1 April 9, 2011 10 - - - - - -SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - - http://www.sudo.ws/sudo/license.html for complete details. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -1.8.1 April 9, 2011 11 - - +1.8.2 May 22, 2011 SUDO(1m) diff --git a/doc/sudo.man.in b/doc/sudo.man.in index 3a83e91fc..843d6acd5 100644 --- a/doc/sudo.man.in +++ b/doc/sudo.man.in @@ -149,7 +149,7 @@ .\" ======================================================================== .\" .IX Title "SUDO @mansectsu@" -.TH SUDO @mansectsu@ "April 9, 2011" "1.8.1" "MAINTENANCE COMMANDS" +.TH SUDO @mansectsu@ "May 22, 2011" "1.8.2" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/doc/sudo_plugin.cat b/doc/sudo_plugin.cat index d2578907a..263809228 100644 --- a/doc/sudo_plugin.cat +++ b/doc/sudo_plugin.cat @@ -1,9 +1,7 @@ +SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - NNAAMMEE sudo_plugin - Sudo Plugin API @@ -58,18 +56,6 @@ DDEESSCCRRIIPPTTIIOONN Plugin sudoers_policy sudoers.so Plugin sudoers_io sudoers.so - - - -1.8.1 April 9, 2011 1 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - PPoolliiccyy PPlluuggiinn AAPPII A policy plugin must declare and populate a policy_plugin struct in the global scope. This structure contains pointers to the functions that @@ -124,18 +110,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) version The version passed in by ssuuddoo allows the plugin to determine the major and minor version number of the plugin API supported - - - -1.8.1 April 9, 2011 2 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - by ssuuddoo. conversation @@ -190,18 +164,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) login_shell=bool Set to true if the user specified the -i flag, indicating - - - -1.8.1 April 9, 2011 3 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - that the user wishes to run a login shell. implied_shell=bool @@ -257,17 +219,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) The command name that sudo was run as, typically "sudo" or "sudoedit". - - -1.8.1 April 9, 2011 4 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - sudoedit=bool Set to true when the -e flag is is specified or if invoked as ssuuddooeeddiitt. The plugin shall substitute an editor into @@ -323,17 +274,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) is no terminal device available, a default value of 24 is used. - - -1.8.1 April 9, 2011 5 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - cols=int The number of columns the user's terminal supports. If there is no terminal device available, a default value of @@ -388,18 +328,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) the _o_p_e_n function, the user has requested _s_u_d_o_e_d_i_t mode. _s_u_d_o_e_d_i_t is a mechanism for editing one or more files where an editor is run with the user's credentials instead of with elevated privileges. - - - -1.8.1 April 9, 2011 6 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - ssuuddoo achieves this by creating user-writable temporary copies of the files to be edited and then overwriting the originals with the temporary copies after editing is complete. If the plugin supports @@ -453,19 +381,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) command=string Fully qualified path to the command to be executed. - - - - -1.8.1 April 9, 2011 7 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - runas_uid=uid User ID to run the command as. @@ -520,18 +435,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) timeout=int Command timeout. If non-zero then when the timeout expires - - - -1.8.1 April 9, 2011 8 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - the command will be killed. sudoedit=bool @@ -587,17 +490,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) screen, not output to a pipe or file. This is a hint to the I/O logging plugin which may choose to ignore it. - - -1.8.1 April 9, 2011 9 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - use_pty=bool Allocate a pseudo-tty to run the command in, regardless of whether or not I/O logging is in use. By default, ssuuddoo @@ -651,19 +543,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) policy allows it. If NULL, the plugin should list the privileges of the invoking user. - - - - -1.8.1 April 9, 2011 10 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - argc The number of elements in _a_r_g_v, not counting the final NULL pointer. @@ -718,18 +597,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) Returns 1 on success, 0 on failure and -1 on error. On error, the plugin may optionally call the conversation or plugin_printf - - - -1.8.1 April 9, 2011 11 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - function with SUDO_CONF_ERROR_MSG to present additional error information to the user. @@ -785,17 +652,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) logging is to be performed. If the open function returns 0, no I/O will be sent to the plugin. - - -1.8.1 April 9, 2011 12 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - The io_plugin struct has the following fields: type @@ -850,18 +706,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) "name=value" strings. The vector is terminated by a NULL pointer. These settings correspond to flags the user specified when running ssuuddoo. As such, they will only be present when the - - - -1.8.1 April 9, 2011 13 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - corresponding flag has been specified on the command line. When parsing _s_e_t_t_i_n_g_s, the plugin should split on the ffiirrsstt @@ -916,18 +760,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) error If the command could not be executed, this is set to the value of errno set by the _e_x_e_c_v_e(2) system call. If the command was - - - -1.8.1 April 9, 2011 14 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - successfully executed, the value of error is 0. show_version @@ -982,18 +814,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) the data should be passed to the command, 0 if the data is rejected (which will terminate the command) or -1 if an error occurred. - - - -1.8.1 April 9, 2011 15 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - The function arguments are as follows: buf The buffer containing user input. @@ -1049,17 +869,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) informational or error messages to the user, which is usually more convenient for simple messages where no use input is required. - - -1.8.1 April 9, 2011 16 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - struct sudo_conv_message { #define SUDO_CONV_PROMPT_ECHO_OFF 0x0001 /* do not echo user input */ #define SUDO_CONV_PROMPT_ECHO_ON 0x0002 /* echo user input */ @@ -1111,21 +920,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) in the global scope. This structure contains pointers to the functions that implement plugin initialization, cleanup and group lookup. - - - - - - -1.8.1 April 9, 2011 17 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - struct sudoers_group_plugin { unsigned int version; int (*init)(int version, sudo_printf_t sudo_printf, @@ -1179,19 +973,6 @@ SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) close open file handles. query - - - - -1.8.1 April 9, 2011 18 - - - - - -SUDO_PLUGIN(1m) MAINTENANCE COMMANDS SUDO_PLUGIN(1m) - - int (*query)(const char *user, const char *group, const struct passwd *pwd); @@ -1249,6 +1030,4 @@ DDIISSCCLLAAIIMMEERR -1.8.1 April 9, 2011 19 - - +1.8.2 May 22, 2011 SUDO_PLUGIN(1m) diff --git a/doc/sudo_plugin.man.in b/doc/sudo_plugin.man.in index b78049943..2fe44c61b 100644 --- a/doc/sudo_plugin.man.in +++ b/doc/sudo_plugin.man.in @@ -139,7 +139,7 @@ .\" ======================================================================== .\" .IX Title "SUDO_PLUGIN @mansectsu@" -.TH SUDO_PLUGIN @mansectsu@ "April 9, 2011" "1.8.1" "MAINTENANCE COMMANDS" +.TH SUDO_PLUGIN @mansectsu@ "May 22, 2011" "1.8.2" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/doc/sudoers.cat b/doc/sudoers.cat index 23c368b24..27429e029 100644 --- a/doc/sudoers.cat +++ b/doc/sudoers.cat @@ -1,9 +1,7 @@ +SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - NNAAMMEE sudoers - default sudo security policy module @@ -58,18 +56,6 @@ DDEESSCCRRIIPPTTIIOONN _s_u_d_o_e_r_s also supports logging a command's input and output streams. I/O logging is not on by default but can be enabled using the _l_o_g___i_n_p_u_t and _l_o_g___o_u_t_p_u_t Defaults flags as well as the LOG_INPUT and LOG_OUTPUT - - - -1.8.1 April 9, 2011 1 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - command tags. CCoommmmaanndd EEnnvviirroonnmmeenntt @@ -124,18 +110,6 @@ SSUUDDOOEERRSS FFIILLEE FFOORRMMAATT Form (EBNF). Don't despair if you don't know what EBNF is; it is fairly simple, and the definitions below are annotated. - - - -1.8.1 April 9, 2011 2 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - QQuuiicckk gguuiiddee ttoo EEBBNNFF EBNF is a concise and exact way of describing the grammar of a language. Each EBNF definition is made up of _p_r_o_d_u_c_t_i_o_n _r_u_l_e_s. E.g., @@ -191,17 +165,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) Alias_Type NAME = item1, item2, item3 : NAME = item4, item5 - - -1.8.1 April 9, 2011 3 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - The definitions of what constitutes a valid _a_l_i_a_s member follow. User_List ::= User | @@ -256,18 +219,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) '!'* %:nonunix_group | '!'* %:#nonunix_gid | '!'* +netgroup | - - - -1.8.1 April 9, 2011 4 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - '!'* Runas_Alias A Runas_List is similar to a User_List except that instead of @@ -322,18 +273,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) he/she wishes. However, you may also specify command line arguments (including wildcards). Alternately, you can specify "" to indicate that the command may only be run wwiitthhoouutt command line arguments. A - - - -1.8.1 April 9, 2011 5 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - directory is a fully qualified path name ending in a '/'. When you specify a directory in a Cmnd_List, the user will be able to run any file within that directory (but not in any subdirectories therein). @@ -388,18 +327,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) See "SUDOERS OPTIONS" for a list of supported Defaults parameters. - - - -1.8.1 April 9, 2011 6 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - UUsseerr SSppeecciiffiiccaattiioonn User_Spec ::= User_List Host_List '=' Cmnd_Spec_List \ (':' Host_List '=' Cmnd_Spec_List)* @@ -454,18 +381,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) dgb boulder = (operator) /bin/ls, (root) /bin/kill, /usr/bin/lprm - - - -1.8.1 April 9, 2011 7 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - Then user ddggbb is now allowed to run _/_b_i_n_/_l_s as ooppeerraattoorr, but _/_b_i_n_/_k_i_l_l and _/_u_s_r_/_b_i_n_/_l_p_r_m as rroooott. @@ -520,18 +435,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) the tag unless it is overridden by the opposite tag (i.e.: PASSWD overrides NOPASSWD and NOEXEC overrides EXEC). - - - -1.8.1 April 9, 2011 8 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - _N_O_P_A_S_S_W_D _a_n_d _P_A_S_S_W_D By default, ssuuddoo requires that a user authenticate him or herself @@ -587,17 +490,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) _L_O_G___I_N_P_U_T _a_n_d _N_O_L_O_G___I_N_P_U_T - - -1.8.1 April 9, 2011 9 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - These tags override the value of the _l_o_g___i_n_p_u_t option on a per-command basis. For more information, see the description of _l_o_g___i_n_p_u_t in the "SUDOERS OPTIONS" section below. @@ -653,17 +545,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) file currently being parsed using the #include and #includedir directives. - - -1.8.1 April 9, 2011 10 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - This can be used, for example, to keep a site-wide _s_u_d_o_e_r_s file in addition to a local, per-machine file. For the sake of this example the site-wide _s_u_d_o_e_r_s will be _/_e_t_c_/_s_u_d_o_e_r_s and the per-machine one will @@ -718,18 +599,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) User_Alias, Runas_Alias, or Host_Alias. You should not try to define your own _a_l_i_a_s called AALLLL as the built-in alias will be used in preference to your own. Please note that using AALLLL can be dangerous - - - -1.8.1 April 9, 2011 11 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - since in a command context, it allows the user to run aannyy command on the system. @@ -784,18 +653,6 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS zzlliibb support. env_editor If set, vviissuuddoo will use the value of the EDITOR or - - - -1.8.1 April 9, 2011 12 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - VISUAL environment variables before falling back on the default editor list. Note that this may create a security hole as it allows the user to run any @@ -850,18 +707,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) _o_f_f by default. ignore_dot If set, ssuuddoo will ignore '.' or '' (current dir) in the - - - -1.8.1 April 9, 2011 13 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - PATH environment variable; the PATH itself is not modified. This flag is _o_f_f by default. @@ -916,18 +761,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) log line, prefixed with _T_S_I_D_=. The _i_o_l_o_g___f_i_l_e option may be used to control the format of the session ID. - - - -1.8.1 April 9, 2011 14 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - Output logs may be viewed with the _s_u_d_o_r_e_p_l_a_y(1m) utility, which can also be used to list or search the available logs. @@ -982,18 +815,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) passprompt_override The password prompt specified by _p_a_s_s_p_r_o_m_p_t will - - - -1.8.1 April 9, 2011 15 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - normally only be used if the password prompt provided by systems such as PAM matches the string "Password:". If _p_a_s_s_p_r_o_m_p_t___o_v_e_r_r_i_d_e is set, _p_a_s_s_p_r_o_m_p_t will always @@ -1048,18 +869,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) the the _e_n_v___r_e_s_e_t option is enabled, so _s_e_t___h_o_m_e is only effective for configurations where either _e_n_v___r_e_s_e_t is disabled or HOME is present in the - - - -1.8.1 April 9, 2011 16 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - _e_n_v___k_e_e_p list. This flag is _o_f_f by default. set_logname Normally, ssuuddoo will set the LOGNAME, USER and USERNAME @@ -1115,17 +924,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) not listed in the passwd database as an argument to the --uu option. This flag is _o_f_f by default. - - -1.8.1 April 9, 2011 17 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - tty_tickets If set, users must authenticate on a per-tty basis. With this flag enabled, ssuuddoo will use a file named for the tty the user is logged in on in the user's time @@ -1181,17 +979,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) IInntteeggeerrss tthhaatt ccaann bbee uusseedd iinn aa bboooolleeaann ccoonntteexxtt: - - -1.8.1 April 9, 2011 18 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - loglinelen Number of characters per line for the file log. This value is used to decide when to wrap lines for nicer log files. This has no effect on the syslog log file, @@ -1247,17 +1034,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) The following percent (`%') escape sequences are supported: - - -1.8.1 April 9, 2011 19 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - %{seq} expanded to a monotonically increasing base-36 sequence number, such as 0100A5, where every two @@ -1312,18 +1088,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) noexec_file This option is deprecated and will be removed in a future release of ssuuddoo. The path to the noexec file - - - -1.8.1 April 9, 2011 20 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - should now be set in the _/_e_t_c_/_s_u_d_o_._c_o_n_f file. passprompt The default prompt to use when asking for a password; @@ -1360,15 +1124,20 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) runas_default The default user to run commands as if the --uu option is not specified on the command line. This defaults to - root. Note that if _r_u_n_a_s___d_e_f_a_u_l_t is set it mmuusstt occur - before any Runas_Alias specifications. + root. syslog_badpri Syslog priority to use when user authenticates unsuccessfully. Defaults to alert. + The following syslog priorities are supported: aalleerrtt, + ccrriitt, ddeebbuugg, eemmeerrgg, eerrrr, iinnffoo, nnoottiiccee, and wwaarrnniinngg. + syslog_goodpri Syslog priority to use when user authenticates successfully. Defaults to notice. + See syslog_badpri for the list of supported syslog + priorities. + sudoers_locale Locale to use when parsing the sudoers file, logging commands, and sending email. Note that changing the locale may affect how sudoers is interpreted. Defaults @@ -1378,18 +1147,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) The default is _/_v_a_r_/_a_d_m_/_s_u_d_o. timestampowner The owner of the timestamp directory and the timestamps - - - -1.8.1 April 9, 2011 21 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - stored therein. The default is root. type The default SELinux type to use when constructing a new @@ -1400,16 +1157,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) SSttrriinnggss tthhaatt ccaann bbee uusseedd iinn aa bboooolleeaann ccoonntteexxtt: - askpass The _a_s_k_p_a_s_s option specifies the fully qualified path to a - helper program used to read the user's password when no - terminal is available. This may be the case when ssuuddoo is - executed from a graphical (as opposed to text-based) - application. The program specified by _a_s_k_p_a_s_s should - display the argument passed to it as the prompt and write - the user's password to the standard output. The value of - _a_s_k_p_a_s_s may be overridden by the SUDO_ASKPASS environment - variable. - env_file The _e_n_v___f_i_l_e options specifies the fully qualified path to a file containing variables to be set in the environment of the program being run. Entries in this file should either @@ -1444,18 +1191,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) along with the password prompt. It has the following possible values: - - - -1.8.1 April 9, 2011 22 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - always Always lecture the user. never Never lecture the user. @@ -1511,17 +1246,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) should be enclosed in double quotes (") to protect against ssuuddoo interpreting the @ sign. Defaults to root. - - -1.8.1 April 9, 2011 23 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - secure_path Path used for every command run from ssuuddoo. If you don't trust the people running ssuuddoo to have a sane PATH environment variable you may want to use this. Another use @@ -1533,6 +1257,10 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) syslog Syslog facility if syslog is being used for logging (negate to disable syslog logging). Defaults to auth. + The following syslog facilities are supported: aauutthhpprriivv (if + your OS supports it), aauutthh, ddaaeemmoonn, uusseerr, llooccaall00, llooccaall11, + llooccaall22, llooccaall33, llooccaall44, llooccaall55, llooccaall66, and llooccaall77. + verifypw This option controls when a password will be required when a user runs ssuuddoo with the --vv option. It has the following possible values: @@ -1576,18 +1304,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) environment when the _e_n_v___r_e_s_e_t option is not in effect. The argument may be a double-quoted, space-separated list or a single value without double-quotes. The list - - - -1.8.1 April 9, 2011 24 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - can be replaced, added to, deleted from, or disabled by using the =, +=, -=, and ! operators respectively. The default list of environment variables to remove is @@ -1607,13 +1323,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) variables to keep is displayed when ssuuddoo is run by root with the _-_V option. - When logging via _s_y_s_l_o_g(3), ssuuddoo accepts the following values for the - syslog facility (the value of the ssyysslloogg Parameter): aauutthhpprriivv (if your - OS supports it), aauutthh, ddaaeemmoonn, uusseerr, llooccaall00, llooccaall11, llooccaall22, llooccaall33, - llooccaall44, llooccaall55, llooccaall66, and llooccaall77. The following syslog priorities - are supported: aalleerrtt, ccrriitt, ddeebbuugg, eemmeerrgg, eerrrr, iinnffoo, nnoottiiccee, and - wwaarrnniinngg. - FFIILLEESS _/_e_t_c_/_s_u_d_o_e_r_s List of who can run what @@ -1642,18 +1351,6 @@ EEXXAAMMPPLLEESS # User alias specification User_Alias FULLTIMERS = millert, mikef, dowdy User_Alias PARTTIMERS = bostley, jwfox, crawl - - - -1.8.1 April 9, 2011 25 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - User_Alias WEBMASTERS = will, wendy, wim # Runas alias specification @@ -1707,19 +1404,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) The _U_s_e_r _s_p_e_c_i_f_i_c_a_t_i_o_n is the part that actually determines who may run what. - - - - -1.8.1 April 9, 2011 26 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - root ALL = (ALL) ALL %wheel ALL = (ALL) ALL @@ -1775,17 +1459,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) bob SPARC = (OP) ALL : SGI = (OP) ALL - - -1.8.1 April 9, 2011 27 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - The user bboobb may run anything on the _S_P_A_R_C and _S_G_I machines as any user listed in the _O_P Runas_Alias (rroooott and ooppeerraattoorr). @@ -1840,18 +1513,6 @@ SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) ALL CDROM = NOPASSWD: /sbin/umount /CDROM,\ /sbin/mount -o nosuid\,nodev /dev/cd0a /CDROM - - - -1.8.1 April 9, 2011 28 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - Any user may mount or unmount a CD-ROM on the machines in the CDROM Host_Alias (orion, perseus, hercules) without entering a password. This is a bit tedious for users to type, so it is a prime candidate for @@ -1906,18 +1567,6 @@ PPRREEVVEENNTTIINNGG SSHHEELLLL EESSCCAAPPEESS noexec Many systems that support shared libraries have the ability to override default library functions by pointing an environment variable (usually LD_PRELOAD) to an alternate - - - -1.8.1 April 9, 2011 29 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - shared library. On such systems, ssuuddoo's _n_o_e_x_e_c functionality can be used to prevent a program run by ssuuddoo from executing any other programs. Note, however, that this applies only to @@ -1972,18 +1621,6 @@ SSEECCUURRIITTYY NNOOTTEESS _s_u_d_o_e_r_s will not honor time stamps set far in the future. Time stamps with a date greater than current_time + 2 * TIMEOUT will be ignored and sudo will log and complain. This is done to keep a user from creating - - - -1.8.1 April 9, 2011 30 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - his/her own time stamp with a bogus date on systems that allow users to give away files if the time stamp directory is located in a world- writable directory. @@ -2038,75 +1675,10 @@ SSUUPPPPOORRTT DDIISSCCLLAAIIMMEERR ssuuddoo is provided ``AS IS'' and any express or implied warranties, including, but not limited to, the implied warranties of - - - -1.8.1 April 9, 2011 31 - - - - - -SUDOERS(4) MAINTENANCE COMMANDS SUDOERS(4) - - merchantability and fitness for a particular purpose are disclaimed. See the LICENSE file distributed with ssuuddoo or http://www.sudo.ws/sudo/license.html for complete details. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -1.8.1 April 9, 2011 32 - - +1.8.2 May 22, 2011 SUDOERS(4) diff --git a/doc/sudoers.ldap.cat b/doc/sudoers.ldap.cat index 21704be8f..483500345 100644 --- a/doc/sudoers.ldap.cat +++ b/doc/sudoers.ldap.cat @@ -1,9 +1,7 @@ +SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - NNAAMMEE sudoers.ldap - sudo LDAP configuration @@ -58,18 +56,6 @@ DDEESSCCRRIIPPTTIIOONN Sudo first looks for the cn=default entry in the SUDOers container. If found, the multi-valued sudoOption attribute is parsed in the same - - - -1.8.1 April 9, 2011 1 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - manner as a global Defaults line in _/_e_t_c_/_s_u_d_o_e_r_s. In the following example, the SSH_AUTH_SOCK variable will be preserved in the environment for all users. @@ -124,18 +110,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) A timestamp in the form yyyymmddHHMMZ that can be used to provide a start date/time for when the sudoRole will be valid. If multiple sudoNotBefore entries are present, the earliest is used. Note that - - - -1.8.1 April 9, 2011 2 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - timestamps must be in Coordinated Universal Time (UTC), not the local timezone. @@ -190,18 +164,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) that the user belongs to. (The special ALL tag is matched in this query too.) If no match is returned for the user's name and groups, a third query returns all entries containing user netgroups and checks to - - - -1.8.1 April 9, 2011 3 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - see if the user belongs to any of them. If timed entries are enabled with the SSUUDDOOEERRSS__TTIIMMEEDD configuration @@ -255,19 +217,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) currently ignored. For example, the following attributes do not behave the way one might expect. - - - - -1.8.1 April 9, 2011 4 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - # does not match all but joe # rather, does not match anyone sudoUser: !joe @@ -323,17 +272,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) commercial versions of Unix are only capable of supporting one or the other. - - -1.8.1 April 9, 2011 5 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - HHOOSSTT name[:port] ... If no UURRII is specified, the HHOOSSTT parameter specifies a whitespace- delimited list of LDAP servers to connect to. Each host may @@ -388,18 +326,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) in a moderate amount of debugging information. A value of 2 shows the results of the matches themselves. This parameter should not be set in a production environment as the extra information is - - - -1.8.1 April 9, 2011 6 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - likely to confuse users. BBIINNDDDDNN DN @@ -453,19 +379,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) TTLLSS__CCAACCEERRTT file name An alias for TTLLSS__CCAACCEERRTTFFIILLEE for OpenLDAP compatibility. - - - - -1.8.1 April 9, 2011 7 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - TTLLSS__CCAACCEERRTTFFIILLEE file name The path to a certificate authority bundle which contains the certificates for all the Certificate Authorities the client knows @@ -519,19 +432,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) the OpenSSL manual for a list of valid ciphers. This option is only supported by the OpenLDAP libraries. - - - - -1.8.1 April 9, 2011 8 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - UUSSEE__SSAASSLL on/true/yes/off/false/no Enable UUSSEE__SSAASSLL for LDAP servers that support SASL authentication. @@ -586,18 +486,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) sudoers: files - - - -1.8.1 April 9, 2011 9 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - Note that _/_e_t_c_/_n_s_s_w_i_t_c_h_._c_o_n_f is supported even when the underlying operating system does not use an nsswitch.conf file. @@ -652,18 +540,6 @@ EEXXAAMMPPLLEESS #uri ldaps://secureldapserver #uri ldaps://secureldapserver ldap://ldapserver # - - - -1.8.1 April 9, 2011 10 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - # The amount of time, in seconds, to wait while trying to connect to # an LDAP server. bind_timelimit 30 @@ -718,18 +594,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) #tls_randfile /etc/egd-pool # # You may restrict which ciphers are used. Consult your SSL - - - -1.8.1 April 9, 2011 11 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - # documentation for which options go here. # Only supported when using OpenLDAP. # @@ -784,18 +648,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) attributetype ( 1.3.6.1.4.1.15953.9.1.2 NAME 'sudoHost' - - - -1.8.1 April 9, 2011 12 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - DESC 'Host(s) who may run sudo' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch @@ -850,18 +702,6 @@ SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) DESC 'an integer to order the sudoRole entries' EQUALITY integerMatch ORDERING integerOrderingMatch - - - -1.8.1 April 9, 2011 13 - - - - - -SUDOERS.LDAP(4) MAINTENANCE COMMANDS SUDOERS.LDAP(4) - - SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) objectclass ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL @@ -898,27 +738,4 @@ DDIISSCCLLAAIIMMEERR - - - - - - - - - - - - - - - - - - - - - -1.8.1 April 9, 2011 14 - - +1.8.2 May 22, 2011 SUDOERS.LDAP(4) diff --git a/doc/sudoers.ldap.man.in b/doc/sudoers.ldap.man.in index b1b9d0aa4..2f992828a 100644 --- a/doc/sudoers.ldap.man.in +++ b/doc/sudoers.ldap.man.in @@ -140,7 +140,7 @@ .\" ======================================================================== .\" .IX Title "SUDOERS.LDAP @mansectform@" -.TH SUDOERS.LDAP @mansectform@ "April 9, 2011" "1.8.1" "MAINTENANCE COMMANDS" +.TH SUDOERS.LDAP @mansectform@ "May 22, 2011" "1.8.2" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/doc/sudoers.man.in b/doc/sudoers.man.in index d3efddac0..5dc91ddc8 100644 --- a/doc/sudoers.man.in +++ b/doc/sudoers.man.in @@ -148,7 +148,7 @@ .\" ======================================================================== .\" .IX Title "SUDOERS @mansectform@" -.TH SUDOERS @mansectform@ "April 9, 2011" "1.8.1" "MAINTENANCE COMMANDS" +.TH SUDOERS @mansectform@ "May 22, 2011" "1.8.2" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -1391,16 +1391,19 @@ This option is only available whe \fBsudo\fR is built with SELinux support. .IX Item "runas_default" The default user to run commands as if the \fB\-u\fR option is not specified on the command line. This defaults to \f(CW\*(C`@runas_default@\*(C'\fR. -Note that if \fIrunas_default\fR is set it \fBmust\fR occur before -any \f(CW\*(C`Runas_Alias\*(C'\fR specifications. .IP "syslog_badpri" 16 .IX Item "syslog_badpri" Syslog priority to use when user authenticates unsuccessfully. Defaults to \f(CW\*(C`@badpri@\*(C'\fR. +.Sp +The following syslog priorities are supported: \fBalert\fR, \fBcrit\fR, +\&\fBdebug\fR, \fBemerg\fR, \fBerr\fR, \fBinfo\fR, \fBnotice\fR, and \fBwarning\fR. .IP "syslog_goodpri" 16 .IX Item "syslog_goodpri" Syslog priority to use when user authenticates successfully. Defaults to \f(CW\*(C`@goodpri@\*(C'\fR. +.Sp +See syslog_badpri for the list of supported syslog priorities. .IP "sudoers_locale" 16 .IX Item "sudoers_locale" Locale to use when parsing the sudoers file, logging commands, and @@ -1424,16 +1427,6 @@ This option is only available whe \fBsudo\fR is built with SELinux support. \} .PP \&\fBStrings that can be used in a boolean context\fR: -.IP "askpass" 12 -.IX Item "askpass" -The \fIaskpass\fR option specifies the fully qualified path to a helper -program used to read the user's password when no terminal is -available. This may be the case when \fBsudo\fR is executed from a -graphical (as opposed to text-based) application. The program -specified by \fIaskpass\fR should display the argument passed to it -as the prompt and write the user's password to the standard output. -The value of \fIaskpass\fR may be overridden by the \f(CW\*(C`SUDO_ASKPASS\*(C'\fR -environment variable. .IP "env_file" 12 .IX Item "env_file" The \fIenv_file\fR options specifies the fully qualified path to a @@ -1553,6 +1546,10 @@ This option is @secure_path@ by default. .IX Item "syslog" Syslog facility if syslog is being used for logging (negate to disable syslog logging). Defaults to \f(CW\*(C`@logfac@\*(C'\fR. +.Sp +The following syslog facilities are supported: \fBauthpriv\fR (if your +\&\s-1OS\s0 supports it), \fBauth\fR, \fBdaemon\fR, \fBuser\fR, \fBlocal0\fR, \fBlocal1\fR, +\&\fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR, and \fBlocal7\fR. .IP "verifypw" 12 .IX Item "verifypw" This option controls when a password will be required when a user runs @@ -1617,14 +1614,6 @@ single value without double-quotes. The list can be replaced, added to, deleted from, or disabled by using the \f(CW\*(C`=\*(C'\fR, \f(CW\*(C`+=\*(C'\fR, \f(CW\*(C`\-=\*(C'\fR, and \&\f(CW\*(C`!\*(C'\fR operators respectively. The default list of variables to keep is displayed when \fBsudo\fR is run by root with the \fI\-V\fR option. -.PP -When logging via \fIsyslog\fR\|(3), \fBsudo\fR accepts the following values -for the syslog facility (the value of the \fBsyslog\fR Parameter): -\&\fBauthpriv\fR (if your \s-1OS\s0 supports it), \fBauth\fR, \fBdaemon\fR, \fBuser\fR, -\&\fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, -\&\fBlocal6\fR, and \fBlocal7\fR. The following syslog priorities are -supported: \fBalert\fR, \fBcrit\fR, \fBdebug\fR, \fBemerg\fR, \fBerr\fR, \fBinfo\fR, -\&\fBnotice\fR, and \fBwarning\fR. .SH "FILES" .IX Header "FILES" .ie n .IP "\fI@sysconfdir@/sudoers\fR" 24 diff --git a/doc/sudoreplay.cat b/doc/sudoreplay.cat index 54c96eb44..f04f5fa80 100644 --- a/doc/sudoreplay.cat +++ b/doc/sudoreplay.cat @@ -1,9 +1,7 @@ +SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) -SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) - - NNAAMMEE sudoreplay - replay sudo session logs @@ -58,18 +56,6 @@ OOPPTTIIOONNSS -l [_s_e_a_r_c_h _e_x_p_r_e_s_s_i_o_n] Enable "list mode". In this mode, ssuuddoorreeppllaayy will list available session IDs. If a _s_e_a_r_c_h _e_x_p_r_e_s_s_i_o_n is - - - -1.8.1 April 9, 2011 1 - - - - - -SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) - - specified, it will be used to restrict the IDs that are displayed. An expression is composed of the following predicates: @@ -124,18 +110,6 @@ SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) well as '(' and ')' for grouping (note that parentheses must generally be escaped from the shell). The _a_n_d operator is optional, adjacent predicates have an implied - - - -1.8.1 April 9, 2011 2 - - - - - -SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) - - _a_n_d unless separated by an _o_r. -m _m_a_x___w_a_i_t Specify an upper bound on how long to wait between key @@ -189,19 +163,6 @@ SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) tomorrow Exactly one day from now. - - - - -1.8.1 April 9, 2011 3 - - - - - -SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) - - yesterday 24 hours ago. @@ -256,18 +217,6 @@ FFIILLEESS Example session timing file. Note that the _s_t_d_i_n, _s_t_d_o_u_t and _s_t_d_e_r_r files will be empty unless ssuuddoo - - - -1.8.1 April 9, 2011 4 - - - - - -SUDOREPLAY(1m) MAINTENANCE COMMANDS SUDOREPLAY(1m) - - was used as part of a pipeline for a particular command. EEXXAAMMPPLLEESS @@ -311,20 +260,4 @@ DDIISSCCLLAAIIMMEERR - - - - - - - - - - - - - - -1.8.1 April 9, 2011 5 - - +1.8.2 May 22, 2011 SUDOREPLAY(1m) diff --git a/doc/sudoreplay.man.in b/doc/sudoreplay.man.in index 453cfd059..f821d7630 100644 --- a/doc/sudoreplay.man.in +++ b/doc/sudoreplay.man.in @@ -139,7 +139,7 @@ .\" ======================================================================== .\" .IX Title "SUDOREPLAY @mansectsu@" -.TH SUDOREPLAY @mansectsu@ "April 9, 2011" "1.8.1" "MAINTENANCE COMMANDS" +.TH SUDOREPLAY @mansectsu@ "May 22, 2011" "1.8.2" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/doc/visudo.cat b/doc/visudo.cat index 74ebae6c3..2058f8c78 100644 --- a/doc/visudo.cat +++ b/doc/visudo.cat @@ -1,9 +1,7 @@ +VISUDO(1m) MAINTENANCE COMMANDS VISUDO(1m) -VISUDO(1m) MAINTENANCE COMMANDS VISUDO(1m) - - NNAAMMEE visudo - edit the sudoers file @@ -58,18 +56,6 @@ OOPPTTIIOONNSS --ff may be "-", indicating that _s_u_d_o_e_r_s will be read from the standard input. - - - -1.8.1 April 9, 2011 1 - - - - - -VISUDO(1m) MAINTENANCE COMMANDS VISUDO(1m) - - -h The --hh (_h_e_l_p) option causes vviissuuddoo to print a short help message to the standard output and exit. @@ -123,19 +109,6 @@ DDIIAAGGNNOOSSTTIICCSS used. You may wish to comment out or remove the unused alias. In --ss (strict) mode this is an error, not a warning. - - - - -1.8.1 April 9, 2011 2 - - - - - -VISUDO(1m) MAINTENANCE COMMANDS VISUDO(1m) - - SSEEEE AALLSSOO _v_i(1), _s_u_d_o_e_r_s(4), _s_u_d_o(1m), _v_i_p_w(1m) @@ -170,29 +143,4 @@ DDIISSCCLLAAIIMMEERR - - - - - - - - - - - - - - - - - - - - - - - -1.8.1 April 9, 2011 3 - - +1.8.2 May 22, 2011 VISUDO(1m) diff --git a/doc/visudo.man.in b/doc/visudo.man.in index 645a85629..986f272d2 100644 --- a/doc/visudo.man.in +++ b/doc/visudo.man.in @@ -144,7 +144,7 @@ .\" ======================================================================== .\" .IX Title "VISUDO @mansectsu@" -.TH VISUDO @mansectsu@ "April 9, 2011" "1.8.1" "MAINTENANCE COMMANDS" +.TH VISUDO @mansectsu@ "May 22, 2011" "1.8.2" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l