From 94922dbae56147cfb152e9eec68c907ad8441543 Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Wed, 22 Aug 2007 22:55:46 +0000 Subject: [PATCH] Users may now consist of a uid. --- sudoers.pod | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/sudoers.pod b/sudoers.pod index 0db65e7cd..7af93f3fa 100644 --- a/sudoers.pod +++ b/sudoers.pod @@ -114,15 +114,16 @@ The definitions of what constitutes a valid I member follow. User ',' User_List User ::= '!'* username | + '!'* '#'uid | '!'* '%'group | '!'* '+'netgroup | '!'* User_Alias -A C is made up of one or more usernames, system groups -(prefixed with '%'), netgroups (prefixed with '+') and other aliases. -Each list item may be prefixed with one or more '!' operators. -An odd number of '!' operators negate the value of the item; an even -number just cancel each other out. +A C is made up of one or more usernames, uids (prefixed +with '#'), system groups (prefixed with '%'), netgroups (prefixed +with '+') and Ces. Each list item may be prefixed with +zero or more '!' operators. An odd number of '!' operators negate +the value of the item; an even number just cancel each other out. Runas_List ::= Runas_User | Runas_User ',' Runas_List @@ -133,13 +134,12 @@ number just cancel each other out. '!'* +netgroup | '!'* Runas_Alias -A C is similar to a C except that it can -also contain uids (prefixed with '#') and instead of Ces -it can contain Ces. Note that usernames and groups -are matched as strings. In other words, two users (groups) with -the same uid (gid) are considered to be distinct. If you wish to -match all usernames with the same uid (e.g.Eroot and toor), you -can use a uid instead (#0 in the example given). +A C is similar to a C except that instead +of Ces it can contain Ces. Note that +usernames and groups are matched as strings. In other words, two +users (groups) with the same uid (gid) are considered to be distinct. +If you wish to match all usernames with the same uid (e.g.Eroot +and toor), you can use a uid instead (#0 in the example given). Host_List ::= Host | Host ',' Host_List -- 2.40.0