From: Todd C. Miller Date: Sun, 22 Jul 2007 22:43:28 +0000 (+0000) Subject: Substitute value of path_info into sudoers man page. X-Git-Tag: SUDO_1_7_0~465 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5c6880f1effa856b6362db36a1c5abb6b54619ad;p=sudo Substitute value of path_info into sudoers man page. --- diff --git a/configure b/configure index d9512dc1e..348384aa1 100755 --- a/configure +++ b/configure @@ -458,7 +458,7 @@ ac_includes_default="\ # include #endif" -ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS LIBTOOL CFLAGS PROGS CPPFLAGS LDFLAGS SUDO_LDFLAGS SUDO_OBJS SUDO_LIBS NET_LIBS AFS_LIBS OSDEFS AUTH_OBJS MANTYPE MAN_POSTINSTALL SUDOERS_MODE SUDOERS_UID SUDOERS_GID DEV devdir mansectsu mansectform mansrcdir NOEXECDIR noexec_file INSTALL_NOEXEC timedir timeout password_timeout sudo_umask passprompt long_otp_prompt lecture logfac goodpri badpri loglen ignore_dot mail_no_user mail_no_host mail_no_perms mailto mailsub badpass_message fqdn runas_default env_editor passwd_tries tty_tickets insults root_sudo EGREPPROG CC ac_ct_CC EXEEXT OBJEXT CPP build build_cpu build_vendor build_os host host_cpu host_vendor host_os target target_cpu target_vendor target_os SED EGREP FGREP GREP LD NM LN_S AR ac_ct_AR STRIP ac_ct_STRIP RANLIB ac_ct_RANLIB lt_ECHO UNAMEPROG TRPROG NROFFPROG YACC LIBOBJS ALLOCA KRB5CONFIG LTLIBOBJS' +ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS LIBTOOL CFLAGS PROGS CPPFLAGS LDFLAGS SUDO_LDFLAGS SUDO_OBJS SUDO_LIBS NET_LIBS AFS_LIBS OSDEFS AUTH_OBJS MANTYPE MAN_POSTINSTALL SUDOERS_MODE SUDOERS_UID SUDOERS_GID DEV devdir mansectsu mansectform mansrcdir NOEXECDIR noexec_file INSTALL_NOEXEC DONT_LEAK_PATH_INFO timedir timeout password_timeout sudo_umask passprompt long_otp_prompt lecture logfac goodpri badpri loglen ignore_dot mail_no_user mail_no_host mail_no_perms mailto mailsub badpass_message fqdn runas_default env_editor passwd_tries tty_tickets insults root_sudo path_info EGREPPROG CC ac_ct_CC EXEEXT OBJEXT CPP build build_cpu build_vendor build_os host host_cpu host_vendor host_os target target_cpu target_vendor target_os SED EGREP FGREP GREP LD NM LN_S AR ac_ct_AR STRIP ac_ct_STRIP RANLIB ac_ct_RANLIB lt_ECHO UNAMEPROG TRPROG NROFFPROG YACC LIBOBJS ALLOCA KRB5CONFIG LTLIBOBJS' ac_subst_files='' # Initialize some variables set by options. @@ -1579,6 +1579,25 @@ echo "$as_me: Configuring Sudo version 1.7" >&6;} + + + + + + + + + + + + + + + + + + + @@ -1616,6 +1635,7 @@ passwd_tries=3 tty_tickets=off insults=off root_sudo=on +path_info=on INSTALL_NOEXEC= devdir='$(srcdir)' PROGS="sudo visudo" @@ -3536,6 +3556,7 @@ echo "${ECHO_T}yes" >&6 #define DONT_LEAK_PATH_INFO 1 _ACEOF + path_info=off ;; *) echo "$as_me:$LINENO: result: no" >&5 echo "${ECHO_T}no" >&6 @@ -7081,7 +7102,7 @@ else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF -#line 7084 "configure" +#line 7105 "configure" #include "confdefs.h" #if HAVE_DLFCN_H @@ -7179,7 +7200,7 @@ else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF -#line 7182 "configure" +#line 7203 "configure" #include "confdefs.h" #if HAVE_DLFCN_H @@ -7328,7 +7349,7 @@ ia64-*-hpux*) ;; *-*-irix6*) # Find out which ABI we are using. - $ECHO '#line 7331 "configure"' > conftest.$ac_ext + $ECHO '#line 7352 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? @@ -7979,11 +8000,11 @@ else -e 's:.*FLAGS}? :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:7982: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8003: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:7986: \$? = $ac_status" >&5 + echo "$as_me:8007: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings @@ -8254,11 +8275,11 @@ else -e 's:.*FLAGS}? :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:8257: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8278: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 - echo "$as_me:8261: \$? = $ac_status" >&5 + echo "$as_me:8282: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings @@ -8351,11 +8372,11 @@ else -e 's:.*FLAGS}? :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:8354: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8375: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 - echo "$as_me:8358: \$? = $ac_status" >&5 + echo "$as_me:8379: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized @@ -8405,11 +8426,11 @@ else -e 's:.*FLAGS}? :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` - (eval echo "\"\$as_me:8408: $lt_compile\"" >&5) + (eval echo "\"\$as_me:8429: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 - echo "$as_me:8412: \$? = $ac_status" >&5 + echo "$as_me:8433: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized @@ -23730,6 +23751,7 @@ s,@mansrcdir@,$mansrcdir,;t t s,@NOEXECDIR@,$NOEXECDIR,;t t s,@noexec_file@,$noexec_file,;t t s,@INSTALL_NOEXEC@,$INSTALL_NOEXEC,;t t +s,@DONT_LEAK_PATH_INFO@,$DONT_LEAK_PATH_INFO,;t t s,@timedir@,$timedir,;t t s,@timeout@,$timeout,;t t s,@password_timeout@,$password_timeout,;t t @@ -23755,6 +23777,7 @@ s,@passwd_tries@,$passwd_tries,;t t s,@tty_tickets@,$tty_tickets,;t t s,@insults@,$insults,;t t s,@root_sudo@,$root_sudo,;t t +s,@path_info@,$path_info,;t t s,@EGREPPROG@,$EGREPPROG,;t t s,@CC@,$CC,;t t s,@ac_ct_CC@,$ac_ct_CC,;t t diff --git a/configure.in b/configure.in index c2eaec3e8..b569f21ab 100644 --- a/configure.in +++ b/configure.in @@ -14,23 +14,23 @@ dnl dnl Variables that get substituted in the Makefile and man pages dnl AC_SUBST(LIBTOOL) -AC_SUBST(CFLAGS)dnl -AC_SUBST(PROGS)dnl -AC_SUBST(CPPFLAGS)dnl -AC_SUBST(LDFLAGS)dnl -AC_SUBST(SUDO_LDFLAGS)dnl -AC_SUBST(SUDO_OBJS)dnl -AC_SUBST(LIBS)dnl -AC_SUBST(SUDO_LIBS)dnl -AC_SUBST(NET_LIBS)dnl -AC_SUBST(AFS_LIBS)dnl -AC_SUBST(OSDEFS)dnl -AC_SUBST(AUTH_OBJS)dnl -AC_SUBST(MANTYPE)dnl -AC_SUBST(MAN_POSTINSTALL)dnl -AC_SUBST(SUDOERS_MODE)dnl -AC_SUBST(SUDOERS_UID)dnl -AC_SUBST(SUDOERS_GID)dnl +AC_SUBST(CFLAGS) +AC_SUBST(PROGS) +AC_SUBST(CPPFLAGS) +AC_SUBST(LDFLAGS) +AC_SUBST(SUDO_LDFLAGS) +AC_SUBST(SUDO_OBJS) +AC_SUBST(LIBS) +AC_SUBST(SUDO_LIBS) +AC_SUBST(NET_LIBS) +AC_SUBST(AFS_LIBS) +AC_SUBST(OSDEFS) +AC_SUBST(AUTH_OBJS) +AC_SUBST(MANTYPE) +AC_SUBST(MAN_POSTINSTALL) +AC_SUBST(SUDOERS_MODE) +AC_SUBST(SUDOERS_UID) +AC_SUBST(SUDOERS_GID) AC_SUBST(DEV) AC_SUBST(devdir) AC_SUBST(mansectsu) @@ -39,6 +39,7 @@ AC_SUBST(mansrcdir) AC_SUBST(NOEXECDIR) AC_SUBST(noexec_file) AC_SUBST(INSTALL_NOEXEC) +AC_SUBST(DONT_LEAK_PATH_INFO) dnl dnl Variables that get substituted in docs (not overridden by environment) dnl @@ -67,6 +68,7 @@ AC_SUBST(passwd_tries) AC_SUBST(tty_tickets) AC_SUBST(insults) AC_SUBST(root_sudo) +AC_SUBST(path_info) dnl dnl Initial values for above dnl @@ -94,6 +96,7 @@ passwd_tries=3 tty_tickets=off insults=off root_sudo=on +path_info=on INSTALL_NOEXEC= devdir='$(srcdir)' dnl @@ -1110,6 +1113,7 @@ AC_ARG_ENABLE(path_info, ;; no) AC_MSG_RESULT(yes) AC_DEFINE(DONT_LEAK_PATH_INFO) + path_info=off ;; *) AC_MSG_RESULT(no) AC_MSG_WARN([Ignoring unknown argument to --enable-path-info: $enableval]) diff --git a/sudoers.pod b/sudoers.pod index ed0fe958f..7ffb752e0 100644 --- a/sudoers.pod +++ b/sudoers.pod @@ -583,8 +583,8 @@ to disable this as it could be used to gather information on the location of executables that the normal user does not have access to. The disadvantage is that if the executable is simply not in the user's C, B will tell the user that they are not -allowed to run it, which can be confusing. This flag is I by -default. +allowed to run it, which can be confusing. This flag is I<@path_info@> +by default. =item preserve_groups