X-Git-Url: https://git.gag.com/?a=blobdiff_plain;f=visudo.pod;fp=visudo.pod;h=63cb1131295622e755c69d7c67915f49f66dd4d1;hb=06a67e2a5850f36c627b46f330c988e031536ab3;hp=d914fab45e7aff10b3d868408514fb7f361cc35a;hpb=034bfa94d8911bef1d553a639d43aa8cdefac765;p=debian%2Fsudo diff --git a/visudo.pod b/visudo.pod index d914fab..63cb113 100644 --- a/visudo.pod +++ b/visudo.pod @@ -1,4 +1,5 @@ -Copyright (c) 1996,1998-2005, 2007 Todd C. Miller +Copyright (c) 1996,1998-2005, 2007-2008 + Todd C. Miller Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above @@ -17,7 +18,7 @@ Sponsored in part by the Defense Advanced Research Projects Agency (DARPA) and Air Force Research Laboratory, Air Force Materiel Command, USAF, under agreement number F39502-99-1-0512. -$Sudo: visudo.pod,v 1.38.2.10 2008/02/19 15:45:12 millert Exp $ +$Sudo: visudo.pod,v 1.55 2008/11/15 18:34:01 millert Exp $ =pod =head1 NAME @@ -43,7 +44,7 @@ your system, as determined by the I script. Normally, B does not honor the C or C environment variables unless they contain an editor in the aforementioned editors list. However, if B is configured with the I<--with-enveditor> -flag or the I C variable is set in I, +option or the I C variable is set in I, B will use any the editor defines by C or C. Note that this can be a security hole since it allows the user to execute any program they wish simply by setting C or C. @@ -66,7 +67,7 @@ error occurred (if the editor supports this feature). B accepts the following command line options: -=over 4 +=over 12 =item -c @@ -77,7 +78,7 @@ If the syntax check completes successfully, B will exit with a value of 0. If a syntax error is encountered, B will exit with a value of 1. -=item -f +=item -f I Specify and alternate I file location. With this option B will edit (or check) the I file of your choice, @@ -88,7 +89,7 @@ is the specified I file with ".tmp" appended to it. Enable B mode. In this mode details about syntax errors are not printed. This option is only useful when combined with -the B<-c> flag. +the B<-c> option. =item -s @@ -107,8 +108,8 @@ and exit. =head1 ENVIRONMENT -The following environment variables are used only if B -was configured with the I<--with-env-editor> option: +The following environment variables may be consulted depending on +the value of the I and I I variables: =over 16 @@ -152,26 +153,19 @@ You didn't run B as root. Your userid does not appear in the system passwd file. -=item Warning: undeclared Alias referenced near ... - -Either you are using a {User,Runas,Host,Cmnd}_Alias before -defining it or you have a user or hostname listed that -consists solely of uppercase letters, digits, and the -underscore ('_') character. If the latter, you can ignore -the warnings (B will not complain). In B<-s> (strict) -mode these are errors, not warnings. - -=item Warning: runas_default set after old value is in use ... - -You have a I Defaults setting listed in the I -file after its value has already been used. This means that entries -prior to the I setting will match based on the default -value of I (C<@runas_default@>) whereas entries -B the I setting will match based on the new -value. This is usually unintentional and in most cases the - setting should be placed before any C -or User specifications. In B<-s> (strict) mode this is an error, -not a warning. +=item Warning: {User,Runas,Host,Cmnd}_Alias referenced but not defined + +Either you are trying to use an undeclare {User,Runas,Host,Cmnd}_Alias +or you have a user or hostname listed that consists solely of +uppercase letters, digits, and the underscore ('_') character. In +the latter case, you can ignore the warnings (B will not +complain). In B<-s> (strict) mode these are errors, not warnings. + +=item Warning: unused {User,Runas,Host,Cmnd}_Alias + +The specified {User,Runas,Host,Cmnd}_Alias was defined but never +used. You may wish to comment out or remove the unused alias. In +B<-s> (strict) mode this is an error, not a warning. =back