X-Git-Url: https://git.gag.com/?a=blobdiff_plain;f=visudo.pod;h=ccc5c00b223b961219e28ae56f1b966a9970420c;hb=0ae32cd6e8f1a64e014ea8cff244c971bc479bc6;hp=735ce8fc7e9d67b48e8db7244a6c0357276ea394;hpb=c2b0b328d4a66431e671fb26b47997033feb5e29;p=debian%2Fsudo diff --git a/visudo.pod b/visudo.pod index 735ce8f..ccc5c00 100644 --- a/visudo.pod +++ b/visudo.pod @@ -1,5 +1,5 @@ -=cut -Copyright (c) 1996,1998-2003 Todd C. Miller +Copyright (c) 1996,1998-2005, 2007-2010 + Todd C. Miller Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above @@ -18,7 +18,6 @@ Sponsored in part by the Defense Advanced Research Projects Agency (DARPA) and Air Force Research Laboratory, Air Force Materiel Command, USAF, under agreement number F39502-99-1-0512. -$Sudo: visudo.pod,v 1.39 2004/09/06 20:45:27 millert Exp $ =pod =head1 NAME @@ -27,24 +26,23 @@ visudo - edit the sudoers file =head1 SYNOPSIS -B [ B<-c> ] [ B<-f> I ] [ B<-q> ] [ B<-s> ] [ B<-V> ] +B [B<-c>] [B<-q>] [B<-s>] [B<-V>] [B<-f> I] =head1 DESCRIPTION B edits the I file in a safe fashion, analogous to -L. B locks the I file against multiple +L. B locks the I file against multiple simultaneous edits, provides basic sanity checks, and checks for parse errors. If the I file is currently being edited you will receive a message to try again later. -There is a hard-coded list of editors that B will use set -at compile-time that may be overridden via the I I -C variable. This list defaults to the path to L on -your system, as determined by the I script. Normally, +There is a hard-coded list of one or more editors that B will +use set at compile-time that may be overridden via the I I +C variable. This list defaults to C<"@editor@">. Normally, B does not honor the C or C environment variables unless they contain an editor in the aforementioned editors -list. However, if B is configured with the I<--with-enveditor> -flag or the I C variable is set in I, +list. However, if B is configured with the I<--with-env-editor> +option or the I C variable is set in I, B will use any the editor defines by C or C. Note that this can be a security hole since it allows the user to execute any program they wish simply by setting C or C. @@ -67,7 +65,7 @@ error occurred (if the editor supports this feature). B accepts the following command line options: -=over 4 +=over 12 =item -c @@ -78,7 +76,7 @@ If the syntax check completes successfully, B will exit with a value of 0. If a syntax error is encountered, B will exit with a value of 1. -=item -f +=item -f I Specify and alternate I file location. With this option B will edit (or check) the I file of your choice, @@ -89,14 +87,14 @@ is the specified I file with ".tmp" appended to it. Enable B mode. In this mode details about syntax errors are not printed. This option is only useful when combined with -the B<-c> flag. +the B<-c> option. =item -s Enable B checking of the I file. If an alias is used before it is defined, B will consider this a parse error. Note that it is not possible to differentiate between an -alias and a hostname or username that consists solely of uppercase +alias and a host name or user name that consists solely of uppercase letters, digits, and the underscore ('_') character. =item -V @@ -108,16 +106,34 @@ and exit. =head1 ENVIRONMENT -The following environment variables are used only if B -was configured with the I<--with-env-editor> option: +The following environment variables may be consulted depending on +the value of the I and I I variables: + +=over 16 + +=item C + +Invoked by visudo as the editor to use - VISUAL Invoked by visudo as the editor to use - EDITOR Used by visudo if VISUAL is not set +=item C + +Used by visudo if VISUAL is not set + +=back =head1 FILES - @sysconfdir@/sudoers List of who can run what - @sysconfdir@/sudoers.tmp Lock file for visudo +=over 24 + +=item F<@sysconfdir@/sudoers> + +List of who can run what + +=item F<@sysconfdir@/sudoers.tmp> + +Lock file for visudo + +=back =head1 DIAGNOSTICS @@ -135,32 +151,25 @@ You didn't run B as root. Your userid does not appear in the system passwd file. -=item Warning: undeclared Alias referenced near ... +=item Warning: {User,Runas,Host,Cmnd}_Alias referenced but not defined -Either you are using a {User,Runas,Host,Cmnd}_Alias before -defining it or you have a user or hostname listed that -consists solely of uppercase letters, digits, and the -underscore ('_') character. If the latter, you can ignore -the warnings (B will not complain). In B<-s> (strict) -mode these are errors, not warnings. +Either you are trying to use an undeclare {User,Runas,Host,Cmnd}_Alias +or you have a user or host name listed that consists solely of +uppercase letters, digits, and the underscore ('_') character. In +the latter case, you can ignore the warnings (B will not +complain). In B<-s> (strict) mode these are errors, not warnings. -=item Warning: runas_default set after old value is in use ... +=item Warning: unused {User,Runas,Host,Cmnd}_Alias -You have a I Defaults setting listed in the I -file after its value has already been used. This means that entries -prior to the I setting will match based on the default -value of I (C<@runas_default@>) whereas entries -B the I setting will match based on the new -value. This is usually unintentional and in most cases the - setting should be placed before any C -or User specifications. In B<-s> (strict) mode this is an error, -not a warning. +The specified {User,Runas,Host,Cmnd}_Alias was defined but never +used. You may wish to comment out or remove the unused alias. In +B<-s> (strict) mode this is an error, not a warning. =back =head1 SEE ALSO -L, L, L, L +L, L, L, L =head1 AUTHOR @@ -184,16 +193,13 @@ at http://www.sudo.ws/sudo/bugs/ =head1 SUPPORT -Commercial support is available for B, see -http://www.sudo.ws/sudo/support.html for details. - Limited free support is available via the sudo-users mailing list, see http://www.sudo.ws/mailman/listinfo/sudo-users to subscribe or search the archives. =head1 DISCLAIMER -B is provided ``AS IS'' and any express or implied warranties, +B is provided ``AS IS'' and any express or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. See the LICENSE file distributed with B or http://www.sudo.ws/sudo/license.html