mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-29 05:17:54 +00:00
Code Issues Releases Wiki Activity

White space is not allowed between Defaults and '@', ':', '!', '>'.

Browse Source 
The EBNF made it appear that this is allowed when it really is not.
This commit is contained in:
Todd C. Miller 2023-03-28 16:02:46 -06:00
parent f0030cf30f
commit 3b55de4e83
2 changed files with 68 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
docs/sudoers.man.in
View File

@ -25,7 +25,7 @@
.nr BA @BAMAN@ .nr BA @BAMAN@
.nr LC @LCMAN@ .nr LC @LCMAN@
.nr PS @PSMAN@ .nr PS @PSMAN@
.TH "SUDOERS" "@mansectform@" "January 16, 2023" "Sudo @PACKAGE_VERSION@" "File Formats Manual" .TH "SUDOERS" "@mansectform@" "March 28, 2023" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.nh .nh
.if n .ad l .if n .ad l
.SH "NAME" .SH "NAME"
@ -1219,21 +1219,45 @@ Certain configuration options may be changed from their default
values at run-time via one or more values at run-time via one or more
\fIDefault_Entry\fR \fIDefault_Entry\fR
lines. lines.
These may affect all users on any host, all users on a specific host, a These may affect all users on any host
specific user, a specific command, or commands being run as a specific user. (\(oqDefaults\(cq),
all users on a specific host
(\(oqDefaults@host\(cq),
a specific user
(\(oqDefaults:user\(cq),
a specific command
(\(oqDefaults!cmnd\(cq),
or commands being run as a specific user
(\(oqDefaults>runasuser\(cq).
.PP
White space is not permitted between
\(oqDefaults\(cq
and the
\(oq@\(cq,
\(oq\&:\(cq,
\(oq\&!\(cq,
or
\(oq>\(cq
characters.
While a comma-separated list may be used in place of a single value after the
\(oq@\(cq,
\(oq\&:\(cq,
\(oq\&!\(cq,
or
\(oq>\(cq
character, using an alias instead of a list is often improve readability.
Per-command entries may not include command line arguments. Per-command entries may not include command line arguments.
If you need to specify arguments, define a If you need to specify arguments, define a
\fICmnd_Alias\fR \fICmnd_Alias\fR
and reference and reference that instead.
that instead.
.nf .nf
.sp .sp
.RS 0n .RS 0n
Default_Type ::= 'Defaults' | Default_Type ::= 'Defaults' |
'Defaults' '@' Host_List | 'Defaults@' Host_List |
'Defaults' ':' User_List | 'Defaults:' User_List |
'Defaults' '!' Cmnd_List | 'Defaults!' Cmnd_List |
'Defaults' '>' Runas_List 'Defaults>' Runas_List
Default_Entry ::= Default_Type Parameter_List Default_Entry ::= Default_Type Parameter_List
@ -1379,7 +1403,7 @@ A fully-specified
consists of two consists of two
\fIRunas_List\fRs \fIRunas_List\fRs
(as defined above) separated by a colon (as defined above) separated by a colon
(\(oq:\&\(cq) (\(oq\&:\(cq)
and enclosed in a set of parentheses. and enclosed in a set of parentheses.
The first The first
\fIRunas_List\fR \fIRunas_List\fR

44
docs/sudoers.mdoc.in
View File

@ -25,7 +25,7 @@
.nr BA @BAMAN@ .nr BA @BAMAN@
.nr LC @LCMAN@ .nr LC @LCMAN@
.nr PS @PSMAN@ .nr PS @PSMAN@
.Dd January 16, 2023 .Dd March 28, 2023
.Dt SUDOERS @mansectform@ .Dt SUDOERS @mansectform@
.Os Sudo @PACKAGE_VERSION@ .Os Sudo @PACKAGE_VERSION@
.Sh NAME .Sh NAME
@ -1169,19 +1169,43 @@ Certain configuration options may be changed from their default
values at run-time via one or more values at run-time via one or more
.Em Default_Entry .Em Default_Entry
lines. lines.
These may affect all users on any host, all users on a specific host, a These may affect all users on any host
specific user, a specific command, or commands being run as a specific user. .Pq Sq Defaults ,
all users on a specific host
.Pq Sq Defaults@host ,
a specific user
.Pq Sq Defaults:user ,
a specific command
.Pq Sq Defaults!cmnd ,
or commands being run as a specific user
.Pq Sq Defaults>runasuser .
.Pp
White space is not permitted between
.Sq Defaults
and the
.Ql @ ,
.Ql \&: ,
.Ql \&! ,
or
.Ql >
characters.
While a comma-separated list may be used in place of a single value after the
.Ql @ ,
.Ql \&: ,
.Ql \&! ,
or
.Ql >
character, using an alias instead of a list is often improve readability.
Per-command entries may not include command line arguments. Per-command entries may not include command line arguments.
If you need to specify arguments, define a If you need to specify arguments, define a
.Em Cmnd_Alias .Em Cmnd_Alias
and reference and reference that instead.
that instead.
.Bd -literal .Bd -literal
Default_Type ::= 'Defaults' | Default_Type ::= 'Defaults' |
'Defaults' '@' Host_List | 'Defaults@' Host_List |
'Defaults' ':' User_List | 'Defaults:' User_List |
'Defaults' '!' Cmnd_List | 'Defaults!' Cmnd_List |
'Defaults' '>' Runas_List 'Defaults>' Runas_List
Default_Entry ::= Default_Type Parameter_List Default_Entry ::= Default_Type Parameter_List
@ -1332,7 +1356,7 @@ A fully-specified
consists of two consists of two
.Em Runas_List Ns s .Em Runas_List Ns s
(as defined above) separated by a colon (as defined above) separated by a colon
.Pq Ql :\& .Pq Ql \&:
and enclosed in a set of parentheses. and enclosed in a set of parentheses.
The first The first
.Em Runas_List .Em Runas_List