From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Fri, 28 Jan 2011 21:14:29 +0000 (-0500)
Subject: Document that sudoers_locale also affects logging and email.
X-Git-Tag: SUDO_1_7_5~48
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=d4f2ddb44824392ff3db0d6758572022b09e5f5d;p=sudo

Document that sudoers_locale also affects logging and email.

--HG--
branch : 1.7
---

diff --git a/sudoers.cat b/sudoers.cat
index 1a7cb63a5..d3fa3c35b 100644
--- a/sudoers.cat
+++ b/sudoers.cat
@@ -61,7 +61,7 @@ DDEESSCCRRIIPPTTIIOONN
 
 
 
-1.7.5b2                  January 13, 2011                       1
+1.7.5b2                  January 28, 2011                       1
 
 
 
@@ -127,7 +127,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       2
+1.7.5b2                  January 28, 2011                       2
 
 
 
@@ -193,7 +193,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       3
+1.7.5b2                  January 28, 2011                       3
 
 
 
@@ -259,7 +259,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       4
+1.7.5b2                  January 28, 2011                       4
 
 
 
@@ -325,7 +325,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       5
+1.7.5b2                  January 28, 2011                       5
 
 
 
@@ -391,7 +391,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       6
+1.7.5b2                  January 28, 2011                       6
 
 
 
@@ -457,7 +457,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       7
+1.7.5b2                  January 28, 2011                       7
 
 
 
@@ -523,7 +523,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       8
+1.7.5b2                  January 28, 2011                       8
 
 
 
@@ -589,7 +589,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                       9
+1.7.5b2                  January 28, 2011                       9
 
 
 
@@ -655,7 +655,7 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
 
 
 
-1.7.5b2                  January 13, 2011                      10
+1.7.5b2                  January 28, 2011                      10
 
 
 
@@ -721,7 +721,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      11
+1.7.5b2                  January 28, 2011                      11
 
 
 
@@ -787,7 +787,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      12
+1.7.5b2                  January 28, 2011                      12
 
 
 
@@ -853,7 +853,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      13
+1.7.5b2                  January 28, 2011                      13
 
 
 
@@ -919,7 +919,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      14
+1.7.5b2                  January 28, 2011                      14
 
 
 
@@ -985,7 +985,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      15
+1.7.5b2                  January 28, 2011                      15
 
 
 
@@ -1051,7 +1051,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      16
+1.7.5b2                  January 28, 2011                      16
 
 
 
@@ -1117,7 +1117,7 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
 
-1.7.5b2                  January 13, 2011                      17
+1.7.5b2                  January 28, 2011                      17
 
 
 
@@ -1131,9 +1131,10 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
        syslog_goodpri  Syslog priority to use when user authenticates
                        successfully.  Defaults to notice.
 
-       sudoers_locale  Locale to use when parsing the sudoers file.  Note that
-                       changing the locale may affect how sudoers is
-                       interpreted.  Defaults to "C".
+       sudoers_locale  Locale to use when parsing the sudoers file, logging
+                       commands, and sending email.  Note that changing the
+                       locale may affect how sudoers is interpreted.  Defaults
+                       to "C".
 
        timestampdir    The directory in which ssuuddoo stores its timestamp files.
                        The default is _/_v_a_r_/_a_d_m_/_s_u_d_o.
@@ -1179,11 +1180,10 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
                    never   Never lecture the user.
 
-                   once    Only lecture the user the first time they run ssuuddoo.
 
 
 
-1.7.5b2                  January 13, 2011                      18
+1.7.5b2                  January 28, 2011                      18
 
 
 
@@ -1192,6 +1192,8 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+                   once    Only lecture the user the first time they run ssuuddoo.
+
                    If no value is specified, a value of _o_n_c_e is implied.
                    Negating the option results in a value of _n_e_v_e_r being used.
                    The default value is _o_n_c_e.
@@ -1244,12 +1246,10 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
        secure_path Path used for every command run from ssuuddoo.  If you don't
                    trust the people running ssuuddoo to have a sane PATH
                    environment variable you may want to use this.  Another use
-                   is if you want to have the "root path" be separate from the
-                   "user path."  Users in the group specified by the
 
 
 
-1.7.5b2                  January 13, 2011                      19
+1.7.5b2                  January 28, 2011                      19
 
 
 
@@ -1258,6 +1258,8 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+                   is if you want to have the "root path" be separate from the
+                   "user path."  Users in the group specified by the
                    _e_x_e_m_p_t___g_r_o_u_p option are not affected by _s_e_c_u_r_e___p_a_t_h.  This
                    option is not set by default.
 
@@ -1310,12 +1312,10 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
                        can be replaced, added to, deleted from, or disabled by
                        using the =, +=, -=, and ! operators respectively.  The
                        default list of environment variables to remove is
-                       displayed when ssuuddoo is run by root with the _-_V option.
-                       Note that many operating systems will remove
 
 
 
-1.7.5b2                  January 13, 2011                      20
+1.7.5b2                  January 28, 2011                      20
 
 
 
@@ -1324,6 +1324,8 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+                       displayed when ssuuddoo is run by root with the _-_V option.
+                       Note that many operating systems will remove
                        potentially dangerous variables from the environment of
                        any setuid process (such as ssuuddoo).
 
@@ -1376,12 +1378,10 @@ EEXXAAMMPPLLEESS
 
         # Host alias specification
         Host_Alias     SPARC = bigtime, eclipse, moet, anchor :\
-                       SGI = grolsch, dandelion, black :\
-                       ALPHA = widget, thalamus, foobar :\
 
 
 
-1.7.5b2                  January 13, 2011                      21
+1.7.5b2                  January 28, 2011                      21
 
 
 
@@ -1390,6 +1390,8 @@ EEXXAAMMPPLLEESS
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+                       SGI = grolsch, dandelion, black :\
+                       ALPHA = widget, thalamus, foobar :\
                        HPPA = boa, nag, python
         Host_Alias     CUNETS = 128.138.0.0/255.255.0.0
         Host_Alias     CSNETS = 128.138.243.0, 128.138.204.0/24, 128.138.242.0
@@ -1443,11 +1445,9 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
        Full time sysadmins (mmiilllleerrtt, mmiikkeeff, and ddoowwddyy) may run any command on
        any host without authenticating themselves.
 
-        PARTTIMERS     ALL = ALL
-
 
 
-1.7.5b2                  January 13, 2011                      22
+1.7.5b2                  January 28, 2011                      22
 
 
 
@@ -1456,6 +1456,8 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+        PARTTIMERS     ALL = ALL
+
        Part time sysadmins (bboossttlleeyy, jjwwffooxx, and ccrraawwll) may run any command on
        any host but they must authenticate themselves first (since the entry
        lacks the NOPASSWD tag).
@@ -1508,12 +1510,10 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
         +secretaries   ALL = PRINTING, /usr/bin/adduser, /usr/bin/rmuser
 
-       Users in the sseeccrreettaarriieess netgroup need to help manage the printers as
-       well as add and remove users, so they are allowed to run those commands
 
 
 
-1.7.5b2                  January 13, 2011                      23
+1.7.5b2                  January 28, 2011                      23
 
 
 
@@ -1522,6 +1522,8 @@ SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+       Users in the sseeccrreettaarriieess netgroup need to help manage the printers as
+       well as add and remove users, so they are allowed to run those commands
        on all machines.
 
         fred           ALL = (DB) NOPASSWD: ALL
@@ -1575,11 +1577,9 @@ SSEECCUURRIITTYY NNOOTTEESS
        desired command to a different name and then executing that.  For
        example:
 
-           bill        ALL = ALL, !SU, !SHELLS
-
 
 
-1.7.5b2                  January 13, 2011                      24
+1.7.5b2                  January 28, 2011                      24
 
 
 
@@ -1588,6 +1588,8 @@ SSEECCUURRIITTYY NNOOTTEESS
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+           bill        ALL = ALL, !SU, !SHELLS
+
        Doesn't really prevent bbiillll from running the commands listed in _S_U or
        _S_H_E_L_L_S since he can simply copy those commands to a different name, or
        use a shell escape from an editor or other program.  Therefore, these
@@ -1641,11 +1643,9 @@ PPRREEVVEENNTTIINNGG SSHHEELLLL EESSCCAAPPEESS
 
                      sudo -V | grep "dummy exec"
 
-                 If the resulting output contains a line that begins with:
 
 
-
-1.7.5b2                  January 13, 2011                      25
+1.7.5b2                  January 28, 2011                      25
 
 
 
@@ -1654,6 +1654,8 @@ PPRREEVVEENNTTIINNGG SSHHEELLLL EESSCCAAPPEESS
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+                 If the resulting output contains a line that begins with:
+
                      File containing dummy exec functions:
 
                  then ssuuddoo may be able to replace the exec family of functions
@@ -1706,12 +1708,10 @@ BBUUGGSS
 
 SSUUPPPPOORRTT
        Limited free support is available via the sudo-users mailing list, see
-       http://www.sudo.ws/mailman/listinfo/sudo-users to subscribe or search
-       the archives.
 
 
 
-1.7.5b2                  January 13, 2011                      26
+1.7.5b2                  January 28, 2011                      26
 
 
 
@@ -1720,6 +1720,9 @@ SSUUPPPPOORRTT
 SUDOERS(4)             MAINTENANCE COMMANDS            SUDOERS(4)
 
 
+       http://www.sudo.ws/mailman/listinfo/sudo-users to subscribe or search
+       the archives.
+
 DDIISSCCLLAAIIMMEERR
        ssuuddoo is provided ``AS IS'' and any express or implied warranties,
        including, but not limited to, the implied warranties of
@@ -1774,9 +1777,6 @@ DDIISSCCLLAAIIMMEERR
 
 
 
-
-
-
-1.7.5b2                  January 13, 2011                      27
+1.7.5b2                  January 28, 2011                      27
 
 
diff --git a/sudoers.man.in b/sudoers.man.in
index d1a4fa3ad..95b3320d5 100644
--- a/sudoers.man.in
+++ b/sudoers.man.in
@@ -148,7 +148,7 @@
 .\" ========================================================================
 .\"
 .IX Title "SUDOERS @mansectform@"
-.TH SUDOERS @mansectform@ "January 13, 2011" "1.7.5b2" "MAINTENANCE COMMANDS"
+.TH SUDOERS @mansectform@ "January 28, 2011" "1.7.5b2" "MAINTENANCE COMMANDS"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -1184,9 +1184,9 @@ Syslog priority to use when user authenticates successfully.
 Defaults to \f(CW\*(C`@goodpri@\*(C'\fR.
 .IP "sudoers_locale" 16
 .IX Item "sudoers_locale"
-Locale to use when parsing the sudoers file.  Note that changing
-the locale may affect how sudoers is interpreted.
-Defaults to \f(CW"C"\fR.
+Locale to use when parsing the sudoers file, logging commands, and
+sending email.  Note that changing the locale may affect how sudoers
+is interpreted.  Defaults to \f(CW"C"\fR.
 .IP "timestampdir" 16
 .IX Item "timestampdir"
 The directory in which \fBsudo\fR stores its timestamp files.
diff --git a/sudoers.pod b/sudoers.pod
index 1768c3cf2..4697be69b 100644
--- a/sudoers.pod
+++ b/sudoers.pod
@@ -1107,9 +1107,9 @@ Defaults to C<@goodpri@>.
 
 =item sudoers_locale
 
-Locale to use when parsing the sudoers file.  Note that changing
-the locale may affect how sudoers is interpreted.
-Defaults to C<"C">.
+Locale to use when parsing the sudoers file, logging commands, and
+sending email.  Note that changing the locale may affect how sudoers
+is interpreted.  Defaults to C<"C">.
 
 =item timestampdir