Merge commit 'upstream/1.7.0'

[debian/sudo] / sudo.pod

diff --git a/sudo.pod b/sudo.pod
index e96f044c0b699bb39273eb03131578afad31be2c..7c4dbaf73028e47240e50ee0f4699c18b3f76ed8 100644 (file)
--- a/sudo.pod
+++ b/sudo.pod
@@ -439,8 +439,8 @@ and, as such, it is not possible for B<sudo> to preserve them.
 To prevent command spoofing, B<sudo> checks "." and "" (both denoting
 current directory) last when searching for a command in the user's
 PATH (if one or both are in the PATH).  Note, however, that the
-actual C<PATH> environment variable is I<not> modified and is passed
-unchanged to the program that B<sudo> executes.
+C<PATH> environment variable is further modified in Debian because of
+the use of the I<SECURE_PATH> build option.
 
 B<sudo> will check the ownership of its timestamp directory
 (F<@timedir@> by default) and ignore the directory's contents if
@@ -595,6 +595,10 @@ L<grep(1)>, L<su(1)>, L<stat(2)>,
 L<login_cap(3)>,
 L<passwd(5)>, L<sudoers(5)>, L<visudo(8)>
 
+The file /usr/share/doc/sudo/OPTIONS describes the options used for building
+the Debian version of sudo, some of which change default behaviors documented
+elsewhere in this document.
+
 =head1 AUTHORS
 
 Many people have worked on B<sudo> over the years; this