mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 09:57:41 +00:00
Code Issues Releases Wiki Activity

Document negated sudoHost entries.

Browse Source
This commit is contained in:
Todd C. Miller 2016-09-14 10:29:18 -06:00
parent f51fbfa40d
commit 7fd6edb6df
3 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/sudoers.ldap.cat
View File

@ -80,7 +80,9 @@ DDEESSCCRRIIPPTTIIOONN
with a `+'). The special value ALL will match any host. Host with a `+'). The special value ALL will match any host. Host
netgroups are matched using the host (both qualified and netgroups are matched using the host (both qualified and
unqualified) and domain members only; the user member is not used unqualified) and domain members only; the user member is not used
when matching. when matching. If a sudoHost entry is preceded by an exclamation
point, `!', and the entry matches, the sudoRole in which it resides
will be ignored.
ssuuddooCCoommmmaanndd ssuuddooCCoommmmaanndd
A fully-qualified Unix command name with optional command line A fully-qualified Unix command name with optional command line

7
doc/sudoers.ldap.man.in
View File

@ -167,6 +167,13 @@ The special value
will match any host. will match any host.
Host netgroups are matched using the host (both qualified and unqualified) Host netgroups are matched using the host (both qualified and unqualified)
and domain members only; the user member is not used when matching. and domain members only; the user member is not used when matching.
If a
\fRsudoHost\fR
entry is preceded by an exclamation point,
\(oq\&!\(cq,
and the entry matches, the
\fRsudoRole\fR
in which it resides will be ignored.
.TP 6n .TP 6n
\fBsudoCommand\fR \fBsudoCommand\fR
A fully-qualified Unix command name with optional command line arguments, A fully-qualified Unix command name with optional command line arguments,

7
doc/sudoers.ldap.mdoc.in
View File

@ -159,6 +159,13 @@ The special value
will match any host. will match any host.
Host netgroups are matched using the host (both qualified and unqualified) Host netgroups are matched using the host (both qualified and unqualified)
and domain members only; the user member is not used when matching. and domain members only; the user member is not used when matching.
If a
.Li sudoHost
entry is preceded by an exclamation point,
.Ql \&! ,
and the entry matches, the
.Li sudoRole
in which it resides will be ignored.
.It Sy sudoCommand .It Sy sudoCommand
A fully-qualified Unix command name with optional command line arguments, A fully-qualified Unix command name with optional command line arguments,
potentially including globbing characters (aka wild cards). potentially including globbing characters (aka wild cards).