From: Todd C. Miller Date: Thu, 26 Oct 2000 17:03:55 +0000 (+0000) Subject: regen X-Git-Tag: SUDO_1_6_4~247 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=dea1ce4d3e1ef590b2db6bd6086cde98d3ae0d85;p=sudo regen --- diff --git a/sudo.cat b/sudo.cat index 05d67aa09..d96e32854 100644 --- a/sudo.cat +++ b/sudo.cat @@ -9,8 +9,8 @@ NNNNAAAAMMMMEEEE SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS ssssuuuuddddoooo ----VVVV | ----hhhh | ----llll | ----LLLL | ----vvvv | ----kkkk | ----KKKK | ----ssss | [ ----HHHH ] [----SSSS ] - [ ----bbbb ] | [ ----pppp _p_r_o_m_p_t ] [ ----cccc _c_l_a_s_s|_- ] [ ----uuuu _u_s_e_r_n_a_m_e|_#_u_i_d ] - _c_o_m_m_a_n_d + [ ----bbbb ] | [ ----pppp _p_r_o_m_p_t ] [ ----cccc _c_l_a_s_s|_- ] [ ----aaaa _a_u_t_h___t_y_p_e ] [ + ----uuuu _u_s_e_r_n_a_m_e|_#_u_i_d ] _c_o_m_m_a_n_d DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN ssssuuuuddddoooo allows a permitted user to execute a _c_o_m_m_a_n_d as the @@ -61,7 +61,7 @@ OOOOPPPPTTTTIIIIOOOONNNNSSSS -August 13, 2000 1.6.4 1 +October 26, 2000 1.6.4 1 @@ -75,9 +75,9 @@ sudo(1m) MAINTENANCE COMMANDS sudo(1m) -v If given the ----vvvv (_v_a_l_i_d_a_t_e) option, ssssuuuuddddoooo will update the user's timestamp, prompting for the user's pass­ - word if necessary. This extends the ssssuuuuddddoooo timeout to - for another `5' minutes (or whatever the timeout is - set to in _s_u_d_o_e_r_s) but does not run a command. + word if necessary. This extends the ssssuuuuddddoooo timeout for + another `5' minutes (or whatever the timeout is set to + in _s_u_d_o_e_r_s) but does not run a command. -k The ----kkkk (_k_i_l_l) option to ssssuuuuddddoooo invalidates the user's timestamp by setting the time on it to the epoch. The @@ -115,26 +115,34 @@ sudo(1m) MAINTENANCE COMMANDS sudo(1m) classes where ssssuuuuddddoooo has been configured with the --with-logincap option. - -u The ----uuuu (_u_s_e_r) option causes ssssuuuuddddoooo to run the specified - command as a user other than _r_o_o_t. To specify a _u_i_d - instead of a _u_s_e_r_n_a_m_e, use _#_u_i_d. + -a The ----aaaa (_a_u_t_h_e_n_t_i_c_a_t_i_o_n _t_y_p_e) option causes ssssuuuuddddoooo to use + the specified authentication type when validating the + user, as allowed by /etc/login.conf. The system + administrator may specify a list of sudo-specific + authentication methods by adding an "auth-sudo" entry + in /etc/login.conf. This option is only available on + systems that support BSD authentication where ssssuuuuddddoooo has + been configured with the --with-bsdauth option. - -s The ----ssss (_s_h_e_l_l) option runs the shell specified by the - _S_H_E_L_L environment variable if it is set or the shell - as specified in _p_a_s_s_w_d(4). +October 26, 2000 1.6.4 2 -August 13, 2000 1.6.4 2 +sudo(1m) MAINTENANCE COMMANDS sudo(1m) -sudo(1m) MAINTENANCE COMMANDS sudo(1m) + -u The ----uuuu (_u_s_e_r) option causes ssssuuuuddddoooo to run the specified + command as a user other than _r_o_o_t. To specify a _u_i_d + instead of a _u_s_e_r_n_a_m_e, use _#_u_i_d. + -s The ----ssss (_s_h_e_l_l) option runs the shell specified by the + _S_H_E_L_L environment variable if it is set or the shell + as specified in _p_a_s_s_w_d(4). -H The ----HHHH (_H_O_M_E) option sets the `HOME' environment vari­ able to the homedir of the target user (root by @@ -182,18 +190,10 @@ SSSSEEEECCCCUUUURRRRIIIITTTTYYYY NNNNOOOOTTTTE denoting current directory) last when searching for a com­ mand in the user's PATH (if one or both are in the PATH). Note, however, that the actual `PATH' environment variable - is _n_o_t modified and is passed unchanged to the program - that ssssuuuuddddoooo executes. - - For security reasons, if your OS supports shared libraries - and does not disable user-defined library search paths for - setuid programs (most do), you should either use a linker - option that disables this behavior or link ssssuuuuddddoooo stati­ - cally. -August 13, 2000 1.6.4 3 +October 26, 2000 1.6.4 3 @@ -202,6 +202,15 @@ August 13, 2000 1.6.4 3 sudo(1m) MAINTENANCE COMMANDS sudo(1m) + is _n_o_t modified and is passed unchanged to the program + that ssssuuuuddddoooo executes. + + For security reasons, if your OS supports shared libraries + and does not disable user-defined library search paths for + setuid programs (most do), you should either use a linker + option that disables this behavior or link ssssuuuuddddoooo stati­ + cally. + ssssuuuuddddoooo will check the ownership of its timestamp directory (_/_v_a_r_/_r_u_n_/_s_u_d_o by default) and ignore the directory's con­ tents if it is not owned by root and only writable by @@ -225,7 +234,7 @@ sudo(1m) MAINTENANCE COMMANDS sudo(1m) Timestamps with a date greater than current_time + 2 * `TIMEOUT' will be ignored and sudo will log and complain. This is done to keep a user from creating his/her own - timestamp with a bogus date on system that allow users to + timestamp with a bogus date on systems that allow users to give away files. EEEEXXXXAAAAMMMMPPPPLLLLEEEESSSS @@ -248,24 +257,24 @@ EEEEXXXXAAAAMMMMPPPPLLLLEEEESSSS To shutdown a machine: - % sudo shutdown -r +15 "quick reboot" - To make a usage listing of the directories in the /home - partition. Note that this runs the commands in a sub- - shell to make the `cd' and file redirection work. - % sudo sh -c "cd /home ; du -s * | sort -rn > USAGE" +October 26, 2000 1.6.4 4 -August 13, 2000 1.6.4 4 +sudo(1m) MAINTENANCE COMMANDS sudo(1m) + % sudo shutdown -r +15 "quick reboot" + To make a usage listing of the directories in the /home + partition. Note that this runs the commands in a sub- + shell to make the `cd' and file redirection work. -sudo(1m) MAINTENANCE COMMANDS sudo(1m) + % sudo sh -c "cd /home ; du -s * | sort -rn > USAGE" EEEENNNNVVVVIIIIRRRROOOONNNNMMMMEEEENNNNTTTT @@ -292,13 +301,14 @@ FFFFIIIILLLLEEEESSSS AAAAUUUUTTTTHHHHOOOORRRRSSSS - Many people have worked on ssssuuuuddddoooo over the years, this ver­ + Many people have worked on ssssuuuuddddoooo over the years; this ver­ sion consists of code written primarily by: Todd Miller Chris Jepeway - See the HISTORY file in the ssssuuuuddddoooo distribution for a short + See the HISTORY file in the ssssuuuuddddoooo distribution or visit + http://www.courtesan.com/sudo/history.html for a short history of ssssuuuuddddoooo. BBBBUUUUGGGGSSSS @@ -312,27 +322,27 @@ DDDDIIIISSSSCCCCLLLLAAAAIIIIMMMMEEEERRRR purpose are disclaimed. See the LICENSE file distributed with ssssuuuuddddoooo for complete details. -CCCCAAAAVVVVEEEEAAAATTTTSSSS - There is no easy way to prevent a user from gaining a root - shell if that user has access to commands allowing shell - escapes. - If users have sudo `ALL' there is nothing to prevent them - from creating their own program that gives them a root - shell regardless of any '!' elements in the user specifi­ - cation. +October 26, 2000 1.6.4 5 -August 13, 2000 1.6.4 5 +sudo(1m) MAINTENANCE COMMANDS sudo(1m) -sudo(1m) MAINTENANCE COMMANDS sudo(1m) +CCCCAAAAVVVVEEEEAAAATTTTSSSS + There is no easy way to prevent a user from gaining a root + shell if that user has access to commands allowing shell + escapes. + If users have sudo `ALL' there is nothing to prevent them + from creating their own program that gives them a root + shell regardless of any '!' elements in the user specifi­ + cation. Running shell scripts via ssssuuuuddddoooo can expose the same kernel bugs that make setuid shell scripts unsafe on some operat­ @@ -381,16 +391,6 @@ SSSSEEEEEEEE AAAALLLLSSSSOOOO - - - - - - - - - - -August 13, 2000 1.6.4 6 +October 26, 2000 1.6.4 6 diff --git a/sudo.man.in b/sudo.man.in index fce1793ca..dfbf614d3 100644 --- a/sudo.man.in +++ b/sudo.man.in @@ -1,5 +1,5 @@ .\" Automatically generated by Pod::Man version 1.04 -.\" Sun Aug 13 14:54:25 2000 +.\" Thu Oct 26 11:02:49 2000 .\" .\" Standard preamble: .\" ====================================================================== @@ -138,7 +138,7 @@ .\" ====================================================================== .\" .IX Title "sudo @mansectsu@" -.TH sudo @mansectsu@ "1.6.4" "August 13, 2000" "MAINTENANCE COMMANDS" +.TH sudo @mansectsu@ "1.6.4" "October 26, 2000" "MAINTENANCE COMMANDS" .UC .SH "NAME" sudo \- execute a command as another user @@ -146,6 +146,7 @@ sudo \- execute a command as another user .IX Header "SYNOPSIS" \&\fBsudo\fR \fB\-V\fR | \fB\-h\fR | \fB\-l\fR | \fB\-L\fR | \fB\-v\fR | \fB\-k\fR | \fB\-K\fR | \fB\-s\fR | [ \fB\-H\fR ] [\fB\-S\fR ] [ \fB\-b\fR ] | [ \fB\-p\fR \fIprompt\fR ] [ \fB\-c\fR \fIclass\fR|\fI-\fR ] +[ \fB\-a\fR \fIauth_type\fR ] [ \fB\-u\fR \fIusername\fR|\fI#uid\fR ] \fIcommand\fR .SH "DESCRIPTION" .IX Header "DESCRIPTION" @@ -202,7 +203,7 @@ The \fB\-h\fR (\fIhelp\fR) option causes \fBsudo\fR to print a usage message and .IX Item "-v" If given the \fB\-v\fR (\fIvalidate\fR) option, \fBsudo\fR will update the user's timestamp, prompting for the user's password if necessary. -This extends the \fBsudo\fR timeout to for another \f(CW\*(C`@timeout@\*(C'\fR minutes +This extends the \fBsudo\fR timeout for another \f(CW\*(C`@timeout@\*(C'\fR minutes (or whatever the timeout is set to in \fIsudoers\fR) but does not run a command. .Ip "\-k" 4 @@ -240,6 +241,15 @@ argument specifies an existing user class, the command must be run as root, or the \fBsudo\fR command must be run from a shell that is already root. This option is only available on systems with \s-1BSD\s0 login classes where \fBsudo\fR has been configured with the \-\-with-logincap option. +.Ip "\-a" 4 +.IX Item "-a" +The \fB\-a\fR (\fIauthentication type\fR) option causes \fBsudo\fR to use the +specified authentication type when validating the user, as allowed +by /etc/login.conf. The system administrator may specify a list +of sudo-specific authentication methods by adding an \*(L"auth-sudo\*(R" +entry in /etc/login.conf. This option is only available on systems +that support \s-1BSD\s0 authentication where \fBsudo\fR has been configured +with the \-\-with-bsdauth option. .Ip "\-u" 4 .IX Item "-u" The \fB\-u\fR (\fIuser\fR) option causes \fBsudo\fR to run the specified command @@ -322,7 +332,7 @@ system startup files. Timestamps with a date greater than current_time + 2 * \f(CW\*(C`TIMEOUT\*(C'\fR will be ignored and sudo will log and complain. This is done to keep a user from creating his/her own timestamp with a bogus -date on system that allow users to give away files. +date on systems that allow users to give away files. .SH "EXAMPLES" .IX Header "EXAMPLES" Note: the following examples assume suitable \fIsudoers\fR\|(@mansectform@) entries. @@ -382,14 +392,15 @@ to make the \f(CW\*(C`cd\*(C'\fR and file redirection work. .Ve .SH "AUTHORS" .IX Header "AUTHORS" -Many people have worked on \fBsudo\fR over the years, this +Many people have worked on \fBsudo\fR over the years; this version consists of code written primarily by: .PP .Vb 2 \& Todd Miller \& Chris Jepeway .Ve -See the \s-1HISTORY\s0 file in the \fBsudo\fR distribution for a short history +See the \s-1HISTORY\s0 file in the \fBsudo\fR distribution or visit +http://www.courtesan.com/sudo/history.html for a short history of \fBsudo\fR. .SH "BUGS" .IX Header "BUGS"