mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-30 22:05:46 +00:00
Code Issues Releases Wiki Activity

Most Defaults entries are applied in order.

Browse Source 
The exceptions are command-specific Defaults (which cannot be applied
until the command's path is resolved) and a small number of "early"
defaults that affect other entries.
This commit is contained in:
Todd C. Miller
2025-02-14 09:29:37 -07:00
parent 1bdead1bb4
commit b04386f631
2 changed files with 20 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/sudoers.man.in
View File

@@ -2,7 +2,7 @@
.\" .\"
.\" SPDX-License-Identifier: ISC .\" SPDX-License-Identifier: ISC
.\" .\"
.\" Copyright (c) 1994-1996, 1998-2005, 2007-2024 .\" Copyright (c) 1994-1996, 1998-2005, 2007-2025
.\" Todd C. Miller <Todd.Miller@sudo.ws> .\" Todd C. Miller <Todd.Miller@sudo.ws>
.\" .\"
.\" Permission to use, copy, modify, and distribute this software for any .\" Permission to use, copy, modify, and distribute this software for any
@@ -25,7 +25,7 @@
.nr BA @BAMAN@ .nr BA @BAMAN@
.nr LC @LCMAN@ .nr LC @LCMAN@
.nr PS @PSMAN@ .nr PS @PSMAN@
.TH "SUDOERS" "@mansectform@" "November 11, 2024" "Sudo @PACKAGE_VERSION@" "File Formats Manual" .TH "SUDOERS" "@mansectform@" "February 14, 2025" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.nh .nh
.if n .ad l .if n .ad l
.SH "NAME" .SH "NAME"
@@ -1357,14 +1357,16 @@ It is not an error to use the
operator to remove an element operator to remove an element
that does not exist in a list. that does not exist in a list.
.PP .PP
Defaults entries are parsed in the following order: global, host, In general Defaults settings are applied in order, later entries
user, and runas Defaults first, then command defaults. will override earlier ones.
If there are multiple Defaults settings of the same type, the last However, command-specific Defaults settings are applied later, once
matching setting is used. the command's path is known.
The following Defaults settings are parsed before all others since In addition, the following Defaults settings must be applied before
they may affect subsequent entries: all others since they may affect subsequent entries:
\fIfqdn\fR, \fIfqdn\fR,
\fIgroup_plugin\fR, \fIgroup_plugin\fR,
\fIignore_unknown_defaults\fR,
\fImatch_group_by_gid\fR,
\fIrunas_default\fR, \fIrunas_default\fR,
\fIsudoers_locale\fR. \fIsudoers_locale\fR.
.PP .PP

18
docs/sudoers.mdoc.in
View File

@@ -1,7 +1,7 @@
.\" .\"
.\" SPDX-License-Identifier: ISC .\" SPDX-License-Identifier: ISC
.\" .\"
.\" Copyright (c) 1994-1996, 1998-2005, 2007-2024 .\" Copyright (c) 1994-1996, 1998-2005, 2007-2025
.\" Todd C. Miller <Todd.Miller@sudo.ws> .\" Todd C. Miller <Todd.Miller@sudo.ws>
.\" .\"
.\" Permission to use, copy, modify, and distribute this software for any .\" Permission to use, copy, modify, and distribute this software for any
@@ -25,7 +25,7 @@
.nr BA @BAMAN@ .nr BA @BAMAN@
.nr LC @LCMAN@ .nr LC @LCMAN@
.nr PS @PSMAN@ .nr PS @PSMAN@
.Dd November 11, 2024 .Dd February 14, 2025
.Dt SUDOERS @mansectform@ .Dt SUDOERS @mansectform@
.Os Sudo @PACKAGE_VERSION@ .Os Sudo @PACKAGE_VERSION@
.Sh NAME .Sh NAME
@@ -1302,14 +1302,16 @@ It is not an error to use the
operator to remove an element operator to remove an element
that does not exist in a list. that does not exist in a list.
.Pp .Pp
Defaults entries are parsed in the following order: global, host, In general Defaults settings are applied in order, later entries
user, and runas Defaults first, then command defaults. will override earlier ones.
If there are multiple Defaults settings of the same type, the last However, command-specific Defaults settings are applied later, once
matching setting is used. the command's path is known.
The following Defaults settings are parsed before all others since In addition, the following Defaults settings must be applied before
they may affect subsequent entries: all others since they may affect subsequent entries:
.Em fqdn , .Em fqdn ,
.Em group_plugin , .Em group_plugin ,
.Em ignore_unknown_defaults ,
.Em match_group_by_gid ,
.Em runas_default , .Em runas_default ,
.Em sudoers_locale . .Em sudoers_locale .
.Pp .Pp