mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-09-03 15:55:40 +00:00
Code Issues Releases Wiki Activity

Add warning about using ALL in a command context.

Browse Source
This commit is contained in:
Todd C. Miller
1999-11-16 05:23:41 +00:00
parent bbc51dac5c
commit 42f7c6f3f4
4 changed files with 28 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
sudoers.cat
View File

@@ -61,7 +61,7 @@ DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN
8/Nov/1999 1.6 1 15/Nov/1999 1.6 1
@@ -127,7 +127,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 2 15/Nov/1999 1.6 2
@@ -193,7 +193,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 3 15/Nov/1999 1.6 3
@@ -259,7 +259,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 4 15/Nov/1999 1.6 4
@@ -325,7 +325,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 5 15/Nov/1999 1.6 5
@@ -391,7 +391,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 6 15/Nov/1999 1.6 6
@@ -457,7 +457,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 7 15/Nov/1999 1.6 7
@@ -503,7 +503,9 @@ sudoers(5) FILE FORMATS sudoers(5)
might otherwise use a Cmnd_Alias, User_Alias, Runas_Alias, might otherwise use a Cmnd_Alias, User_Alias, Runas_Alias,
or Host_Alias. You should not try to define your own or Host_Alias. You should not try to define your own
_a_l_i_a_s called AAAALLLLLLLL as the built in alias will be used in _a_l_i_a_s called AAAALLLLLLLL as the built in alias will be used in
preference to your own. preference to your own. Please note that using AAAALLLLLLLL can be
dangerous since in a command context, it allows the user
to run aaaannnnyyyy command on the system.
An exclamation point ('!') can be used as a logical _n_o_t An exclamation point ('!') can be used as a logical _n_o_t
operator both in an _a_l_i_a_s and in front of a Cmnd. This operator both in an _a_l_i_a_s and in front of a Cmnd. This
@@ -519,11 +521,9 @@ sudoers(5) FILE FORMATS sudoers(5)
syntactic characters in a _U_s_e_r _S_p_e_c_i_f_i_c_a_t_i_o_n ('=', ':', syntactic characters in a _U_s_e_r _S_p_e_c_i_f_i_c_a_t_i_o_n ('=', ':',
'(', ')') is optional. '(', ')') is optional.
The following characters must be escaped with a backslash
15/Nov/1999 1.6 8
8/Nov/1999 1.6 8
@@ -532,6 +532,7 @@ sudoers(5) FILE FORMATS sudoers(5)
sudoers(5) FILE FORMATS sudoers(5) sudoers(5) FILE FORMATS sudoers(5)
The following characters must be escaped with a backslash
('\') when used as part of a word (eg. a username or ('\') when used as part of a word (eg. a username or
hostname): '@', '!', '=', ':', ',', '(', ')', '\'. hostname): '@', '!', '=', ':', ',', '(', ')', '\'.
@@ -588,8 +589,7 @@ EEEEXXXXAAAAMMMMPPPPLLLLEEEESSSS
15/Nov/1999 1.6 9
8/Nov/1999 1.6 9
@@ -655,7 +655,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 10 15/Nov/1999 1.6 10
@@ -721,7 +721,7 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 11 15/Nov/1999 1.6 11
@@ -787,7 +787,7 @@ SSSSEEEEEEEE AAAALLLLSSSSOOOO
8/Nov/1999 1.6 12 15/Nov/1999 1.6 12
@@ -853,6 +853,6 @@ sudoers(5) FILE FORMATS sudoers(5)
8/Nov/1999 1.6 13 15/Nov/1999 1.6 13

3
sudoers.html
View File

@@ -555,7 +555,8 @@ up to the end of the line, are ignored.
<P> <P>
The reserved word <STRONG>ALL</STRONG> is a a built in <EM>alias</EM> that always causes a match to succeed. It can be used wherever one might The reserved word <STRONG>ALL</STRONG> is a a built in <EM>alias</EM> that always causes a match to succeed. It can be used wherever one might
otherwise use a <CODE>Cmnd_Alias</CODE>, <CODE>User_Alias</CODE>, <CODE>Runas_Alias</CODE>, or <CODE>Host_Alias</CODE>. You should not try to define your own <EM>alias</EM> called <STRONG>ALL</STRONG> as the built in alias will be used in preference to your own. otherwise use a <CODE>Cmnd_Alias</CODE>, <CODE>User_Alias</CODE>, <CODE>Runas_Alias</CODE>, or <CODE>Host_Alias</CODE>. You should not try to define your own <EM>alias</EM> called <STRONG>ALL</STRONG> as the built in alias will be used in preference to your own. Please note
that using <STRONG>ALL</STRONG> can be dangerous since in a command context, it allows the user to run <STRONG>any</STRONG> command on the system.
<P> <P>
An exclamation point ('!') can be used as a logical <EM>not</EM> operator both in an <EM>alias</EM> and in front of a <CODE>Cmnd</CODE>. This allows one to exclude certain values. Note, however, that using a <CODE>!</CODE> in conjunction with the built in <CODE>ALL</CODE> alias to allow a user to run ``all but a few'' commands rarely works as An exclamation point ('!') can be used as a logical <EM>not</EM> operator both in an <EM>alias</EM> and in front of a <CODE>Cmnd</CODE>. This allows one to exclude certain values. Note, however, that using a <CODE>!</CODE> in conjunction with the built in <CODE>ALL</CODE> alias to allow a user to run ``all but a few'' commands rarely works as

10
sudoers.man
View File

@@ -2,8 +2,8 @@
''' $RCSfile$$Revision$$Date$ ''' $RCSfile$$Revision$$Date$
''' '''
''' $Log$ ''' $Log$
''' Revision 1.14 1999/11/09 00:00:29 millert ''' Revision 1.15 1999/11/16 05:23:41 millert
''' Mention what characters need to be escaped in names. ''' Add warning about using ALL in a command context.
''' '''
''' '''
.de Sh .de Sh
@@ -96,7 +96,7 @@
.nr % 0 .nr % 0
.rr F .rr F
.\} .\}
.TH sudoers 5 "1.6" "8/Nov/1999" "FILE FORMATS" .TH sudoers 5 "1.6" "15/Nov/1999" "FILE FORMATS"
.UC .UC
.if n .hy 0 .if n .hy 0
.if n .na .if n .na
@@ -568,7 +568,9 @@ The reserved word \fB\s-1ALL\s0\fR is a a built in \fIalias\fR that always cause
a match to succeed. It can be used wherever one might otherwise a match to succeed. It can be used wherever one might otherwise
use a \f(CWCmnd_Alias\fR, \f(CWUser_Alias\fR, \f(CWRunas_Alias\fR, or \f(CWHost_Alias\fR. use a \f(CWCmnd_Alias\fR, \f(CWUser_Alias\fR, \f(CWRunas_Alias\fR, or \f(CWHost_Alias\fR.
You should not try to define your own \fIalias\fR called \fB\s-1ALL\s0\fR as the You should not try to define your own \fIalias\fR called \fB\s-1ALL\s0\fR as the
built in alias will be used in preference to your own. built in alias will be used in preference to your own. Please note
that using \fB\s-1ALL\s0\fR can be dangerous since in a command context, it
allows the user to run \fBany\fR command on the system.
.PP .PP
An exclamation point (\*(R'!') can be used as a logical \fInot\fR operator An exclamation point (\*(R'!') can be used as a logical \fInot\fR operator
both in an \fIalias\fR and in front of a \f(CWCmnd\fR. This allows one to both in an \fIalias\fR and in front of a \f(CWCmnd\fR. This allows one to

4
sudoers.pod
View File

@@ -523,7 +523,9 @@ The reserved word B<ALL> is a a built in I<alias> that always causes
a match to succeed. It can be used wherever one might otherwise a match to succeed. It can be used wherever one might otherwise
use a C<Cmnd_Alias>, C<User_Alias>, C<Runas_Alias>, or C<Host_Alias>. use a C<Cmnd_Alias>, C<User_Alias>, C<Runas_Alias>, or C<Host_Alias>.
You should not try to define your own I<alias> called B<ALL> as the You should not try to define your own I<alias> called B<ALL> as the
built in alias will be used in preference to your own. built in alias will be used in preference to your own. Please note
that using B<ALL> can be dangerous since in a command context, it
allows the user to run B<any> command on the system.
An exclamation point ('!') can be used as a logical I<not> operator An exclamation point ('!') can be used as a logical I<not> operator
both in an I<alias> and in front of a C<Cmnd>. This allows one to both in an I<alias> and in front of a C<Cmnd>. This allows one to