diff --git a/sudo.pod b/sudo.pod index 8759f3385..8ac968727 100644 --- a/sudo.pod +++ b/sudo.pod @@ -27,16 +27,16 @@ sudo, sudoedit - execute a command as another user =head1 SYNOPSIS -B B<-K> | B<-L> | B<-V> | B<-h> | B<-k> | B<-v> +B B<-K> | B<-k> | B<-h> | B<-L> | B<-V> | B<-v> -B S<[B<-U> I]> S<[B<-u> I|I<#uid>]> B<-l> [I] +B B<-l> S<[B<-U> I]> S<[B<-u> I|I<#uid>]> [I] -B [B<-HPSb>] S<[B<-a> I]> S<[B<-C> I]> +B [B<-bHPS>] S<[B<-a> I]> S<[B<-C> I]> S<[B<-c> I|I<->]> S<[B<-p> I]> S<[B<-u> I|I<#uid>]> S<{B<-e> file [...] | B<-i> | B<-s> | I}> -B [B<-S>] S<[B<-a> I]> -S<[B<-p> I]> S<[B<-u> I|I<#uid>]> +B S<[B<-a> I]> +S<[B<-p> I]> [B<-S>] S<[B<-u> I|I<#uid>]> file [...] =head1 DESCRIPTION @@ -92,62 +92,6 @@ B accepts the following command line options: =over 4 -=item -C fd - -Normally, B will close all open file descriptors other than -standard input, standard output and standard error. The B<-C> -(I) option allows the user to specify a starting point -above the standard error (file descriptor three). Values less than -three are not permitted. This option is only available if the -administrator has enabled the I option in -L. - -=item -H - -The B<-H> (I) option sets the C environment variable -to the homedir of the target user (root by default) as specified -in passwd(@mansectform@). By default, B does not modify C -(see I and I in L). - -=item -K - -The B<-K> (sure I) option is like B<-k> except that it removes -the user's timestamp entirely. Like B<-k>, this option does not -require a password. - -=item -L - -The B<-L> (I defaults) option will list out the parameters -that may be set in a I line along with a short description -for each. This option is useful in conjunction with grep(1). - -=item -P - -The B<-P> (I) option causes B to -preserve the invoking user's group vector unaltered. By default, -B will initialize the group vector to the list of groups the -target user is in. The real and effective group IDs, however, are -still set to match the target user. - -=item -S - -The B<-S> (I) option causes B to read the password from -the standard input instead of the terminal device. - -=item -U - -The B<-U> (I) option is used in conjunction with the B<-l> -option to specify the user whose privileges should be listed. Only -root or a user with B C on the current host may use this -option. - -=item -V - -The B<-V> (I) option causes B to print the version -number and exit. If the invoking user is already root the B<-V> -option will print out a list of the defaults B was compiled -with as well as the machine's local network addresses. - =item -a The B<-a> (I) option causes B to use the @@ -164,6 +108,16 @@ The B<-b> (I) option tells B to run the given command in the background. Note that if you use the B<-b> option you cannot use shell job control to manipulate the process. +=item -C fd + +Normally, B will close all open file descriptors other than +standard input, standard output and standard error. The B<-C> +(I) option allows the user to specify a starting point +above the standard error (file descriptor three). Values less than +three are not permitted. This option is only available if the +administrator has enabled the I option in +L. + =item -c The B<-c> (I) option causes B to run the specified command @@ -213,6 +167,13 @@ B is unable to update a file with its edited version, the user will receive a warning and the edited copy will remain in a temporary file. +=item -H + +The B<-H> (I) option sets the C environment variable +to the homedir of the target user (root by default) as specified +in passwd(@mansectform@). By default, B does not modify C +(see I and I in L). + =item -h The B<-h> (I) option causes B to print a usage message and exit. @@ -228,6 +189,12 @@ shell. It also initializes the environment, leaving I unchanged, setting I, I, I, I, and I, and unsetting all other environment variables. +=item -K + +The B<-K> (sure I) option is like B<-k> except that it removes +the user's timestamp entirely. Like B<-k>, this option does not +require a password. + =item -k The B<-k> (I) option to B invalidates the user's timestamp @@ -236,6 +203,12 @@ run a password will be required. This option does not require a password and was added to allow a user to revoke B permissions from a .logout file. +=item -L + +The B<-L> (I defaults) option will list out the parameters +that may be set in a I line along with a short description +for each. This option is useful in conjunction with grep(1). + =item -l [I] If no I is specified, the B<-l> (I) option will list @@ -246,6 +219,14 @@ fully-qualified path to the command is displayed along with any command line arguments. If I is not allowed, B will exit with a return value of 1. +=item -P + +The B<-P> (I) option causes B to +preserve the invoking user's group vector unaltered. By default, +B will initialize the group vector to the list of groups the +target user is in. The real and effective group IDs, however, are +still set to match the target user. + =item -p The B<-p> (I) option allows you to override the default @@ -279,12 +260,24 @@ two consecutive C<%> characters are collapsed into a single C<%> character =back +=item -S + +The B<-S> (I) option causes B to read the password from +the standard input instead of the terminal device. + =item -s The B<-s> (I) option runs the shell specified by the I environment variable if it is set or the shell as specified in L. +=item -U + +The B<-U> (I) option is used in conjunction with the B<-l> +option to specify the user whose privileges should be listed. Only +root or a user with B C on the current host may use this +option. + =item -u The B<-u> (I) option causes B to run the specified command @@ -293,6 +286,13 @@ I, use I<#uid>. Note that if the I Defaults option is set (see L) it is not possible to run commands with a uid not listed in the password database. +=item -V + +The B<-V> (I) option causes B to print the version +number and exit. If the invoking user is already root the B<-V> +option will print out a list of the defaults B was compiled +with as well as the machine's local network addresses. + =item -v If given the B<-v> (I) option, B will update the