From: Todd C. Miller <Todd.Miller@courtesan.com> Date: Mon, 13 Jul 2015 18:58:25 +0000 (-0600) Subject: Document that the values printed by "sudo -V" are affected by X-Git-Tag: SUDO_1_8_14^2~7 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5125f82c4e2d25cbb7d49781b16648302e60fa32;p=sudo Document that the values printed by "sudo -V" are affected by Defaults settings in sudoers. --- diff --git a/doc/sudoers.cat b/doc/sudoers.cat index cbf478fde..4714451d3 100644 --- a/doc/sudoers.cat +++ b/doc/sudoers.cat @@ -924,12 +924,12 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS Any variables in the caller's environment that match the env_keep and env_check lists are then added, followed by any variables present in the file specified - by the _e_n_v___f_i_l_e option (if any). The default contents - of the env_keep and env_check lists are displayed when - ssuuddoo is run by root with the --VV option. If the - _s_e_c_u_r_e___p_a_t_h option is set, its value will be used for - the PATH environment variable. This flag is _o_n by - default. + by the _e_n_v___f_i_l_e option (if any). The contents of the + env_keep and env_check lists, as modified by global + Defaults parameters in _s_u_d_o_e_r_s, are displayed when ssuuddoo + is run by root with the --VV option. If the _s_e_c_u_r_e___p_a_t_h + option is set, its value will be used for the PATH + environment variable. This flag is _o_n by default. fast_glob Normally, ssuuddoo uses the glob(3) function to do shell- style globbing when matching path names. However, @@ -1708,7 +1708,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS Regardless of whether the env_reset option is enabled or disabled, variables specified by env_check will be preserved in the environment if they pass the - aforementioned check. The default list of environment + aforementioned check. The global list of environment variables to check is displayed when ssuuddoo is run by root with the --VV option. @@ -1718,7 +1718,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS list or a single value without double-quotes. The list can be replaced, added to, deleted from, or disabled by using the =, +=, -=, and ! operators respectively. The - default list of environment variables to remove is + global list of environment variables to remove is displayed when ssuuddoo is run by root with the --VV option. Note that many operating systems will remove potentially dangerous variables from the environment of @@ -1731,7 +1731,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS be a double-quoted, space-separated list or a single value without double-quotes. The list can be replaced, added to, deleted from, or disabled by using the =, +=, - -=, and ! operators respectively. The default list of + -=, and ! operators respectively. The global list of variables to keep is displayed when ssuuddoo is run by root with the --VV option. diff --git a/doc/sudoers.man.in b/doc/sudoers.man.in index 298a33a70..bbf81c3cd 100644 --- a/doc/sudoers.man.in +++ b/doc/sudoers.man.in @@ -2001,11 +2001,13 @@ lists are then added, followed by any variables present in the file specified by the \fIenv_file\fR option (if any). -The default contents of the +The contents of the \fRenv_keep\fR and \fRenv_check\fR -lists are displayed when +lists, as modified by global Defaults parameters in +\fIsudoers\fR, +are displayed when \fBsudo\fR is run by root with the \fB\-V\fR @@ -3524,7 +3526,7 @@ Regardless of whether the option is enabled or disabled, variables specified by \fRenv_check\fR will be preserved in the environment if they pass the aforementioned check. -The default list of environment variables to check is displayed when +The global list of environment variables to check is displayed when \fBsudo\fR is run by root with the @@ -3545,7 +3547,7 @@ The list can be replaced, added to, deleted from, or disabled by using the and \fR\&!\fR operators respectively. -The default list of environment variables to remove is displayed when +The global list of environment variables to remove is displayed when \fBsudo\fR is run by root with the \fB\-V\fR @@ -3570,7 +3572,7 @@ The list can be replaced, added to, deleted from, or disabled by using the and \fR\&!\fR operators respectively. -The default list of variables to keep +The global list of variables to keep is displayed when \fBsudo\fR is run by root with the diff --git a/doc/sudoers.mdoc.in b/doc/sudoers.mdoc.in index cd8d6c7b0..6e9aa8395 100644 --- a/doc/sudoers.mdoc.in +++ b/doc/sudoers.mdoc.in @@ -1866,11 +1866,13 @@ lists are then added, followed by any variables present in the file specified by the .Em env_file option (if any). -The default contents of the +The contents of the .Li env_keep and .Li env_check -lists are displayed when +lists, as modified by global Defaults parameters in +.Em sudoers , +are displayed when .Nm sudo is run by root with the .Fl V @@ -3272,7 +3274,7 @@ Regardless of whether the option is enabled or disabled, variables specified by .Li env_check will be preserved in the environment if they pass the aforementioned check. -The default list of environment variables to check is displayed when +The global list of environment variables to check is displayed when .Nm sudo is run by root with the @@ -3291,7 +3293,7 @@ The list can be replaced, added to, deleted from, or disabled by using the and .Li \&! operators respectively. -The default list of environment variables to remove is displayed when +The global list of environment variables to remove is displayed when .Nm sudo is run by root with the .Fl V @@ -3315,7 +3317,7 @@ The list can be replaced, added to, deleted from, or disabled by using the and .Li \&! operators respectively. -The default list of variables to keep +The global list of variables to keep is displayed when .Nm sudo is run by root with the