2
0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-31 14:25:15 +00:00

Document that commands matched by "sudo ALL" are not affected by

fdexec.
This commit is contained in:
Todd C. Miller
2017-03-27 11:10:18 -06:00
parent ba15306c97
commit 272a9c8e9b
3 changed files with 21 additions and 3 deletions

View File

@@ -1852,6 +1852,10 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
A workaround is to use the SUDO_COMMAND environment
variable instead.
The _f_d_e_x_e_c setting is only used when the command is matched
by path name. It has no effect if the command is matched
by the built-in AALLLL alias.
This setting is only supported by version 1.8.20 or higher.
If the operating system does not support the fexecve(2)
system call, this setting has no effect.
@@ -2792,4 +2796,4 @@ DDIISSCCLLAAIIMMEERR
file distributed with ssuuddoo or https://www.sudo.ws/license.html for
complete details.
Sudo 1.8.20 March 22, 2017 Sudo 1.8.20
Sudo 1.8.20 March 27, 2017 Sudo 1.8.20

View File

@@ -21,7 +21,7 @@
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\"
.TH "SUDOERS" "5" "March 22, 2017" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.TH "SUDOERS" "5" "March 27, 2017" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.nh
.if n .ad l
.SH "NAME"
@@ -3700,6 +3700,13 @@ A workaround is to use the
\fRSUDO_COMMAND\fR
environment variable instead.
.sp
The
\fIfdexec\fR
setting is only used when the command is matched by path name.
It has no effect if the command is matched by the built-in
\fBALL\fR
alias.
.sp
This setting is only supported by version 1.8.20 or higher.
If the operating system does not support the
fexecve(2)

View File

@@ -19,7 +19,7 @@
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\"
.Dd March 22, 2017
.Dd March 27, 2017
.Dt SUDOERS @mansectform@
.Os Sudo @PACKAGE_VERSION@
.Sh NAME
@@ -3457,6 +3457,13 @@ A workaround is to use the
.Dv SUDO_COMMAND
environment variable instead.
.Pp
The
.Em fdexec
setting is only used when the command is matched by path name.
It has no effect if the command is matched by the built-in
.Sy ALL
alias.
.Pp
This setting is only supported by version 1.8.20 or higher.
If the operating system does not support the
.Xr fexecve 2