From: Todd C. Miller Date: Fri, 18 Jun 2010 14:05:44 +0000 (-0400) Subject: No longer need to use -- with the -s flag X-Git-Tag: SUDO_1_7_3~39 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=82b840959954309cbdb3fb51f10c4e93b1a96607;p=sudo No longer need to use -- with the -s flag --HG-- branch : 1.7 --- diff --git a/sudo.cat b/sudo.cat index de85025b2..faa62a548 100644 --- a/sudo.cat +++ b/sudo.cat @@ -61,7 +61,7 @@ DDEESSCCRRIIPPTTIIOONN -1.7.3b3 June 10, 2010 1 +1.7.3b3 June 18, 2010 1 @@ -127,7 +127,7 @@ OOPPTTIIOONNSS -1.7.3b3 June 10, 2010 2 +1.7.3b3 June 18, 2010 2 @@ -193,7 +193,7 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) -1.7.3b3 June 10, 2010 3 +1.7.3b3 June 18, 2010 3 @@ -259,7 +259,7 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) -1.7.3b3 June 10, 2010 4 +1.7.3b3 June 18, 2010 4 @@ -325,7 +325,7 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) -1.7.3b3 June 10, 2010 5 +1.7.3b3 June 18, 2010 5 @@ -351,8 +351,7 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) does not run a command. -- The ---- option indicates that ssuuddoo should stop processing - command line arguments. It is most useful in conjunction - with the --ss option. + command line arguments. Environment variables to be set for the command may also be passed on the command line in the form of VVAARR=_v_a_l_u_e, e.g. @@ -388,10 +387,11 @@ SSEECCUURRIITTYY NNOOTTEESS invoking process permitted by the _e_n_v___c_h_e_c_k and _e_n_v___k_e_e_p _s_u_d_o_e_r_s options. There is effectively a whitelist for environment variables. + If, however, the _e_n_v___r_e_s_e_t option is disabled in _s_u_d_o_e_r_s, any variables -1.7.3b3 June 10, 2010 6 +1.7.3b3 June 18, 2010 6 @@ -400,7 +400,6 @@ SSEECCUURRIITTYY NNOOTTEESS SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - If, however, the _e_n_v___r_e_s_e_t option is disabled in _s_u_d_o_e_r_s, any variables not explicitly denied by the _e_n_v___c_h_e_c_k and _e_n_v___d_e_l_e_t_e options are inherited from the invoking process. In this case, _e_n_v___c_h_e_c_k and _e_n_v___d_e_l_e_t_e behave like a blacklist. Since it is not possible to @@ -454,10 +453,11 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) Since time stamp files live in the file system, they can outlive a user's login session. As a result, a user may be able to login, run a + command with ssuuddoo after authenticating, logout, login again, and run -1.7.3b3 June 10, 2010 7 +1.7.3b3 June 18, 2010 7 @@ -466,7 +466,6 @@ SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) SUDO(1m) MAINTENANCE COMMANDS SUDO(1m) - command with ssuuddoo after authenticating, logout, login again, and run ssuuddoo without authenticating so long as the time stamp file's modification time is within 5 minutes (or whatever the timeout is set to in _s_u_d_o_e_r_s). When the _t_t_y___t_i_c_k_e_t_s option is enabled in _s_u_d_o_e_r_s, the @@ -523,7 +522,8 @@ EENNVVIIRROONNMMEENNTT -1.7.3b3 June 10, 2010 8 + +1.7.3b3 June 18, 2010 8 @@ -589,7 +589,7 @@ SSEEEE AALLSSOO -1.7.3b3 June 10, 2010 9 +1.7.3b3 June 18, 2010 9 @@ -655,6 +655,6 @@ DDIISSCCLLAAIIMMEERR -1.7.3b3 June 10, 2010 10 +1.7.3b3 June 18, 2010 10 diff --git a/sudo.man.in b/sudo.man.in index c3d8425e8..9812468a4 100644 --- a/sudo.man.in +++ b/sudo.man.in @@ -149,7 +149,7 @@ .\" ======================================================================== .\" .IX Title "SUDO @mansectsu@" -.TH SUDO @mansectsu@ "June 10, 2010" "1.7.3b3" "MAINTENANCE COMMANDS" +.TH SUDO @mansectsu@ "June 18, 2010" "1.7.3b3" "MAINTENANCE COMMANDS" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -492,7 +492,7 @@ This extends the \fBsudo\fR timeout for another \f(CW\*(C`@timeout@\*(C'\fR minu a command. .IP "\-\-" 12 The \fB\-\-\fR option indicates that \fBsudo\fR should stop processing command -line arguments. It is most useful in conjunction with the \fB\-s\fR option. +line arguments. .PP Environment variables to be set for the command may also be passed on the command line in the form of \fB\s-1VAR\s0\fR=\fIvalue\fR, e.g. diff --git a/sudo.pod b/sudo.pod index 427527c79..889ef7ebd 100644 --- a/sudo.pod +++ b/sudo.pod @@ -388,7 +388,7 @@ a command. =item -- The B<--> option indicates that B should stop processing command -line arguments. It is most useful in conjunction with the B<-s> option. +line arguments. =back